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WIRELESS LAN 
WORRIES MOUNT 


dero, a division of Oakland, 
Calif.-based Marine Terminals | 
Corp., installed the wireless 
LANs, “the issues about securi- 
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Rollouts delayed, systems shut down as 
organizations scramble for security fixes 


BY BOB BREWIN 
Concerns about security have 
commercial and government 
enterprises moving quickly to 
reassess deployments of indus- 
try-standard wireless LANs. 
Experts say the se- 
curity flaws are a 
potentially severe 
threat to networked 
systems within the 
nation’s critical in- 
frastructure. 

John Montgom- 
ery, chief technical 
officer at Embarca- 
dero Systems Corp. 
in Alameda, Calif., 


PHILIPS TAKES BACK NET DATA CENTER: 


Bankruptcy of hosting 
firm speeds move 


BY JAIKUMAR VIJAYAN 
The financial collapse of Web 
hosting firm Exodus Commu- 
nications Inc. prompted a key 
customer, consumer electron- 
ics giant Philips Electronics 
NV, to accelerate a massive re- 
location of its Internet data 
center to an in-house facility. 


| 


Tips on securing your 
wireless LAN; what help 
ison the way. PAGES 


Warnings sounded on. 
vulnerability of airlines’ 
Websites. PAGES 


Microsoft taps a federal 
cybercop to mold! 
tity strategy. PAGE 9 


| 
| 
| 
| 
| 


said he’s working to improve 


the security of 802.1lb wireless | 


LANs that the company has 
installed at nine West Coast 
ports. Those wireless LAN 


infrastructures support con- | 


‘FIRMS HELD 10 


tainer inventory 
control at the 
ports. They also 
track movement 
and dispatch oper- 
ations. Cranes and 
lifts communicate 
data read from 
smart tags on cargo 
boxes to a central 
database. 

When Embarca- 


its secu- 


The relocation project, com- 
pleted last month, is the first 
in a series of similar moves 
that Amsterdam-based Philips 
plans to make globally in an 
effort to gain greater control 
of its IT equipment and net- 
works. 

Philips will continue to out- 
source application manage- 
ment when it makes sense to 
do so but will keep the equip- 

Data Center, page 61 
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ty were not well known or pub- 


licized,” Montgomery said. But | 


after last year’s terrorist at- 


tacks on the U.S. and height- 
ened concerns over security, | 


he “commissioned a security 


Wireless LANs, page 8 | 


PRIVACY PLEDGES 


| Push for enforcement | 
could spur litigation | 


BY PATRICK THIBODEAU 
WASHINGTON 


Federal and state governments | 
are marching companies into | 
courtrooms for breaking their | 
own data privacy pledges. And 

private lawsuits may not be far 


behind. 


Enforcement actions 


than legislation” has had on 


companies thus far, said Zoe | 
Strickland, chief privacy offi- | 


cer at the U.S. Postal Service, 
during a privacy conference 
here last week. 


Just last month, for example, | 


the Federal Trade Commission 
settled its first security-related 
privacy case against Eli Lilly 


and Co. after the Indianapolis | 


company released nearly 700 
customers’ e-mail 
collected through its Prozac.- 
com Web site. 
Toys R Us Inc. in Paramus, NJ., 
paid $50,000 to settle a com- 
plaint by the New Jersey attor- 


Privacy, page 61 | 


“will | 
perhaps have a larger impact | 


addresses 


In addition, | 





...you could 
map out the future? 


Complex adaptive systems theory 
is anew approach to business planning that enables 
companies to predict future business conditions 
by crunching current information. Find out how 
Procter & Gamble is using these systems to 
improve supply chain efficiency and how Marsh 
and McLennan has turned to them to anticipate 
the costs of natural disasters before they occur. 
Story begins on page 26. 
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WE DIDN'T JUST JUMP ON THE 
INFRASTRUCTURE BANDWAGON. 
) WE BUILT IT. 








ImageRUNNER™ 


A box that delivers paper documents anywhere overnight? 
Or a box that delivers them instantly over the internet? 


=" wa 


The Canon imageRUNNER with document distribution technology. 

You can send paper documents anywhere, in any form, at anytime, right over your network or the internet. desktop 
instantaneously. Simply scan a document into the imageRUNNER 5000, and you can send it to any desktop, 4 
e-mail address, fax machine, database or file server. And since the Canon imageRUNNER is capable of Z ' 
integrating directly with your existing e-mail, lanfax, and document management software, you can 
maximize your investment in these systems*. The cost and hassle of overnight delivery are finally over. i j 
At Canon, we’re giving people the know-how to make paper documents work in an internet world. PRINT 
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Call 1-866-25-CANON or visit www.imagerunner.com Se all On KN OW HOW 4 





IT’S TIME TO SET THE RECORD STRAIGHT. 


LONG BEFORE OUR COMPETITORS EVEN ADDED THE WORD “INFRASTRUCTURE” 
TO THEIR VOCABULARY, WE WERE BUSY CREATING IT. SINCE WE FIRST LAUNCHED 
UNICENTER® IT HAS BECOME THE DE FACTO GLOBAL STANDARD FOR MANAGING 
ALL eBUSINESS INFRASTRUCTURE. BUT WE DIDN’T STOP THERE—WE’RE ALSO 
THE WORLD LEADER IN SECURITY AND STORAGE SOFTWARE. EVERY DAY, OUR 
SOFTWARE HANDLES OVER 180 MILLION TRANSACTIONS, PROTECTS $50 BILLION 
IN WIRE TRANSFERS AND STORES 40 MILLION SECURITY EXCHANGES. EXPERTISE 
DOESN‘T HAPPEN OVERNIGHT. IT’S TAKEN 25 YEARS OF HARD WORK AND 
LEADERSHIP TO GET TO BE THE BEST. SO WHEN WE SAY YOU CAN TRUST EVERY 
ONE OF OUR 18,000 EMPLOYEES AROUND THE WORLD TO DELIVER THE SOFTWARE 


AND SERVICE THAT YOUR eBUSINESS’ SUCCESS DEPENDS ON, WE REALLY MEAN IT. 


Computer Associates™ 


HELLO TOMORROW | WE ARE COMPUTER ASSOCIATES | THE SOFTWARE THAT MANAGES eBUSINESS 





NEWS 6 


6 Citibank replaces its aging 
back-office banking systems in a 
$100 million global project. 


7 Kodak says it’s making big cuts 
in PC total cost of ownership by 
standardizing on IBM equipment. 


9 El Al heeds the warning that air- 
lines’ Web sites are a potential hole 
into their back-end systems. 


12 Notes and Domino users at 
Lotusphere get some Java dumped 
in their laps — and like it. 


14 Incompatible systems force 
many IT shops to shift resources 
from application development to 
application integration. 

16 Retail ClOs face some of the 
same problems that contributed to 


Kmart’s slide. 
updated twice daily, visit 


Quick 
DLink Computerworld.com 


www.computerworld.com/q?q4000 


For breaking news, 


CHANGE AT THE TOP 


What should Samuel Palmisano’s 
top priorities be at IBM? How 
would you rate Louis Gerstner’s 
tenure? Post your opinion in our 
online forum. 
www.computerworld.com/q?a1550 








CONSULTANTS 
IN CRISIS 


Historically, IT consultants 
have been in big demand 
whenever there’s been an 
economic downturn. Not 
this time. Instead, inde- 
pendent consultants are 
struggling to find work 
and figure out other ways 
to be productive. PAGE 30 
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25 Paul A. Strassmann contends 
that megaoutsourcing deals are a 
sign that companies are in finan- 
cial distress. His research reveals 
that companies in eight recent out- 
sourcing deals have delivered 
declining returns on shareholder 
equity from 1996 to 2000. 


28 Grid computing, a fairly recent 
approach to distributed computing 
that draws upon underutilized 
CPU and storage capacity, could 
usher in a new era of supercom- 
puter-type business applications. 


34 Web site investments are 
being tracked more closely to 
determine whether and to what 
extent they are contributing to the 
bottom line. 


36 Fran Quittel offers advice toa 
Cisco Certified Network Associate 
who has no work experience, a 
Web designer who’s checking out 
the Chicago market and a Unix de- 
veloper who’s considering switch- 
ing over to Mac OS X. 


TECHNOLOGY 39 


39 Nicholas Petreley knows why 
AOL Time Warner should be inter- 
ested in Red Hat: it could use Red 
Hat’s open-source technology as 
the basis for an inexpensive all- 
purpose home console. 


42 Agile programming systems 
emphasize frequent iterations and 
interaction with users. 


46 QuickStudy: PHP is an open- 
source language designed for cre- 
ating Web applications. Learn 
more in this week’s tutorial. 


48 Security Journal: Vince Tues- 
day uses a quiet time to make long- 
range plans, though he knows he 
can’t plan for problems ranging 
from router vulnerabilities to 
viruses traveling in on Secure 
Sockets Layer sessions. 


50 Emerging Companies: Atomi- 
ca says its search portal software is 
easy to use and its innovative tech- 
nology provides the most relevant 

results first. 
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NET TO DOMINATE? 


With its .Net framework, Micro- 
soft has quietly pulled ahead of the 
developer curve and is positioned 
to dominate Web services with its 
new application programming in- 
terfaces, says community guest 
columnist Dan Rezick. 
www.computerworld.com/ 
community/os 


| 
| 
| 
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IN LIKE THIN 


Read interviews with key industry 
technologists highlighting ongoing 
thin-client activities for Windows 
and Unix. Also: A Tarantella in- 
stallation and comparison chart of 
three leading Windows thin-client 
systems, plus X for Unix. 
www.computerworld.com/q?a1540 


Server-based applications feeding 
thin-client systems can reduce 
equipment maintenance and upgrade 
costs. IT departments are finding that 
these applications provide fewer end- 
user problems and offer better control 
over applications and data. PAGE 40 


OPINIONS == 22 


Patricia Keefe says that Bill 
Gates’ call to improve security in 
Microsoft’s products is overdue. 
But the changes will primarily ben- 
efit future products, leaving users 
of the company’s existing security- 
weak products at risk. 


Pimm Fox writes that in the 
rush to Web services, users must 
realize that there’s no broad agree- 
ment regarding XML protocols and 
standards. 


23 Thornton May contends that 

vendor CEOs have shown little of 
something that’s really needed in 

difficult times: leadership. 


Frank Hayes says that Sam 
Palmisano’s chief mission as Lou 
Gerstner’s successor at IBM will 
be very simple: Listen to the 
customer. 


Editorial/Letters 
How to Contact CW 
Company Index 
Shark Tank 





PHP inventor 
Rasmus Lerdorf 
(left) talks about 
what corporate IT 
managers should 
= know about the 
open-source scripting language. 
www.computerworld.com/q?24785 








Feds Mull Airline 
Security Network 


Federal transportation officials are 
evaluating the idea of building a 
network that would link all airline 
reservation systems to private and 
government databases for use in 
screening passengers. Two groups 
of IT vendors are developing proto- 
types, but participants said a deci- 
sion hasn't been made on whether 
to move ahead with tests or the 
deployment of such a network. 


Antitrust Judge Seeks 
Settlement Update 


The federal judge overseeing the 
antitrust case against Microsoft 
Corp. ordered the software vendor 
and the Department of Justice to 
file a joint status report and to meet 
with her Feb. 8 to discuss any last- 
minute efforts to modify their pro- 
posed settlement deal. Judge 
Colleen Kollar-Kotelly also asked 
the two sides to set a timetable for 
proposing changes to the deal. 


Linux Group Offers 
Compatibility Tools 


At the LinuxWorld conference in 
New York, the Oakland, Calif.-based 
Free Standards Group released a 
set of application programming in- 
terfaces and other tools aimed at 
boosting compatibility between dif- 
ferent versions of Linux. The group 
also announced an internationaliza- 
tion guide designed to help develop- 
ers localize Linux technology. 


Adobe Signs Deal to 
Buy Forms Developer 


San Jose-based Adobe Systems 
Inc. agreed to acquire Accelio Corp., 


a developer of electronic forms soft- | 


ware, in a stock-swap deal that’s 
currently valued at $72 million. 
Adobe surpassed an unsolicited bid 
that was submitted to Ottawa-based 
Accelio last month by Waterloo, 
Ontario-based Open Text Corp. 
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Citibank Overhauls 
Overseas Systems 





Analysts: Replacing systems, creating 


| cross-border standards may exceed $100M | 





BY LUCAS MEARIAN 


N WHAT analysts are es- | 


timating to be a $100 mil- 


lion-plus project, Citi- | 


bank is replacing a 
decades-old set of back- 


| 
| 
| 
| 


office corporate banking sys- | 
tems in all of its overseas cor- | 
porate offices with a single | 
platform, which will allow it to | 


standard user interfaces and 


The New York-based bank 


| has already completed change- 


| over projects in the Asia-Pacific | 
| region, Western and Eastern | 
America, | 
using a software suite it pur- | 
India-based | 


| Europe 


| chased 


and Latin 


from an 


| technology vendor spun off by 
| the bank three years ago. 


| to 


The changeover, which be- 


gan in early 2000, is expected | 
2004. | 
| back-office system replacement | 


continue through 


| There are still rollouts to be 


completed in more than 100 


| countries. Citibank formally 
| disclosed its work on the proj- 
| ect late last month. 


The bank said the project will 


| pay for itself by letting the com- 
| pany avoid development costs 
related to a clunky legacy back- | 
| office system. Developed in- 


a cross-border set of | 


house in the 1970s, the old sys- 
tem has morphed into 58 dis- 
parate software applications, 
said Jeff Berg, executive direc- 
tor of program management at 
Citibank’s parent, New York- 
based Citigroup Inc. 

“In the ’70s, we were grow- 
ing rapidly in countries around 
the world. To get up and run- 
ning quickly, we’d use this sys- 


| tem called Cosmos [Consoli- 


| dated Online Modulated Oper- | 
ating System],” Berg said. “As | 





the bank grew, we did make a 
mistake in that we released the 
source code to each of the 
countries, and they changed it.” 

Berg said Citibank now has 
a single system that’s cus- 
tomized for each country it op- 


| erates in, using each nation’s 


language, regulatory rules and 
business processes. 
Although it’s not unique, the 


| is the largest of its kind, ana- 


lysts said. 


According to Avivah Litan, | 
an analyst at Gartner Inc. in | 


Stamford, Conn., mapping his- 
torical data is usually the 


biggest challenge in a systems | 


changeover for an organization 
of Citibank’s size. “Also, it’s all 


Citistandards 


What Citibank had: 

8 A back-office corporate banking 
platform built in the 1970s and used 
in more than 100 countries; because 
source code was released, the bank 
wound up with 58 disparate plat- 
forms. 


= Each platform conformed to local 


business rules but didn’t share infor- 
mation efficiently across borders. 


software on each of the 58 platforms 
to update them for a standard format. 
What Citibank will have: 
= A single platform based on soft- 
ware from a former offshore devel- 
opment arm of Citibank 

= Four data centers in Europe, con- 
solidated from 18. 


= Language and regulatory require- 
ments that can be adapted through 
use of parameters in the software 


= Anewset of standardized, cross- 
border business procedures 


the logic on the accounts,” 
Litan said. “They have all these 
| business rules ... embedded in 
| old Cobol code. [In] the old 


gence [are] all in the same pro- 
grams. They’re not separated 
out into different ones like 
modern applications.” 

Both Litan and 





| 
i 
Citibank would have to recode the 


systems, the data and intelli- 


Octavio | 
| Marenzi, managing director at | 
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Boston-based Celent Commu- 
nications LLC, said the project 
will cost more than $100 mil- 
lion and could even run in ex- 
cess of a half-billion dollars. 
The ultimate cost of the proj- 
ect will depend on how many 
consulting firms Citibank uses 
to help analyze the existing 
systems and migrate data over 
to the new platform, said Litan. 

Berg said Citibank plans to 
reduce the number of its data 
centers in Europe from 18 to 
about four by standardizing on 
the new banking platform from 
i-Flex Solutions Inc. in Banga- 
lore, India. The bank antici- 
pates an 18-month return on 
investment, said Berg. 

The software, called Flex- 
cube, is based on an Oracle 
database. It automates the gen- 
eral ledger as well as customer 
accounting, deposits and with- 
drawals, and interest on ac- 
counts, among other services. 
Instead of addressing multiple 
platforms, Citibank will be 
able to simply change parame- 
ters in the new software to 
incorporate a particular coun- 
try’s language, regulations and 
currency conversions. 

“The conversions are quite 
exciting. Those are weekend 
kinds of efforts that usually oc- 
cur around month’s end,” said 
Berg. “What we're finding is 
anytime you install a system 
like this, you have opportuni- 
ties to reconsider your busi- 
ness processes. Because we’re 
making the shift from a coun- 
try to regional back-office sys- 
tem, it definitely gives us op- 
portunity to create ... stan- 
dardization.” D 


Citibank: Culture Clashes, Cross-Border Rivalries Inevitable in a Global Project 





IT issues aren't the only problems that can sur- 
face with a project the size of Citibank’s switch of 
back-office business sys.ems. 

“There's a lot of internal rivalries and politics 
that goes on as well. So it’s a very difficult propo- 
sition to do,” said Octavio Marenzi, managing di- 
rector at Celent Communications. 

Jeff Berg, executive director of program man- 
agement at Citibank’s parent, Citigroup, agreed 
that the changeover has created some intra- 
country rivalries. “I think the challenge has been 
working across the business processes. Opera- 
tions people defend the way they do things. We 
keep saying, ‘Yes, we know these countries are 
different, but they're more similar than different,’ ” 





he said. “In terms of adopting the Citibank cul- 
ture, these banks aren't as different as we think. 

“We're also dealing with every time zone. . . . 
We kind of settled on early-in-the-morning meet- 
ings,” he added. 

Gartner analyst Avivah Litan said there are typ- 
ically tensions related to getting systems up on a 
strict schedule. “They'll go through months and 
months of parallel testing, and finally, when they 
do cutovers - and that will be done in stages - 
these people will be up all night,” Litan said. 

About 250 Citibank IT professionals worldwide 
are involved in the project, according to Berg. 

One way to alleviate such pressures is to set 
up an extensive testing environment to ensure 


that when the platform does go live, problems will 
be held to a minimum. 

Citibank has instituted an elaborate testing 
program that's managed country by country. “The 
testing involved is the end-to-end tests to make 
sure not only [that the software platform] Flex- 
cube operates correctly, but the systems it talks 
to are also operating correctly,” Berg said. 

Berg said Citibank opted to begin the change- 
over overseas, but he noted that U.S. systems 
also run on old, in-house back-office platforms. 
“We're a global company. We just elected to start 
[overseas],” he said. “I think down the road, we'll 
probably tackle it [in the U.S.]. 

~- Lucas Mearian 
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Kodak Touts 100 Success Amid Global PC, Laptop Rollout 


Standardized systems, 


help cut hardware and operating costs | 


help desk tools 


BY MATT HAMBLEN | 
Total cost of ownership (TCO) | 
for PCs has dropped substan- | 
tially at Eastman Kodak Co. | 
midway through a three-year | 
global deployment of 40,000 | 
IBM laptops and desktops. 

There are several reasons 
for the reduced costs, a Kodak 
IT manager said last week, in- 
cluding buying direct from 
IBM and _ standardizing 
hardware and a set of prein- 
stalled software. 

That standardization is re- 
placing an older, more costly 
process that required Kodak’s 
IT workers to install software | 
on a variety of PCs, said Tony 
DiBitetto, director of global 
desktop and telecommunica- 
tions services at the Rochester, | 
N.Y.-based company. 

DiBitetto declined to 
close exactly how much mon- 
ey Kodak has saved through 
the IBM deal. But he said going 
with IBM exclusively saves Ko- 
dak 20% to 25% on laptop and | 
desktop hardware, which is 
still being purchased and 
rolled out as part of a project 
that’s due to end next year. 

Analysts said large compa- 
nies can reduce their annual 
cost of ownership by hundreds 
of dollars per machine, or by as | 
much as 25% during a machine’s 
lifetime, through a 
TCO management program. 

“TCO is hard to measure, but 
there are savings possible,” 
said Roger Kay, an analyst at | 
IDC in Framingham, Mass. “If | 
the number of client machines | 
gets big — in the thousands — 
then it is valuable for enter- 
prises to look at TCO.” 


its | 


dis- | 


rigorous 





Looking Beyond Price Tags 

But teaching corporations to 
look beyond the initial pur- 
chase price and consider other 
TCO factors is arduous, said 
Mark Margevicius, an analyst | 
at Gartner Inc. in Stamford, 
Conn. “Reducing TCO is like 
getting religion,” he said. 

DiBitetto said help desk 


staffers at Kodak are now able 
to resolve nearly twice as many 


queries by phone, addressing | 


68% of the inquiries, up from 
about 35% in 2000. Because it 


can cost as much as $150 for a | 


help desk technician to look at 
a machine on-site, the savings 
add up. “If you make thousands 
of visits a year, 
number,” DiBitetto said. 

The technology helping Ko- 


| dak limit help desk inquiries is | 


IBM’s Rapid Restore, a soft- 


ware utility that sits on a hid- 
| den 


partition and can be 


tapped with a help desk call, 


Kodak also saves costs with 


that’s a big | 


NEWS 


standard “software images 
that can be burned onto PC 
hard drives at the IBM factory, 


with delivery within 10 days. | 


The 


software image includes 


utilities, hardware 

tions and drivers. 
In October, IBM announced 

management software called 


specifica- 


| the Windows 2000 operating | 
| system, applications, language | 


Margevicius, Kay and Bob 
Sutherland, an analyst at Tech- 
nology Business Research Inc. 
in Hampton, N.H., all said that 
IBM has been a leader in image 
management tools. Although 
the tools could help 


| gain the PC market share it lost 


ImageUltra that enables it to | 
put a superimage of software | 


on a PC’s hard drive that will 
custom-configure itself to the | 


machine’s hardware specifica- | 
laptop and | 
be |: 


tions. That 
desktop can 
quickly imprinted with an im- 


way, 
machines 


| age or updated, said Kay. 


DiBitetto said IBM was cho- 


| sen in 2600 because Kodak’s 
DiBitetto said. Restores occur | 
| within 20 to 30 minutes. 


efforts to cut costs meshed well 
with IBM’s image-management 
approach. 


last year, the company has had 


difficulty explaining its vari- 


ous products and their value, 
they said. 


- Cost-Conscious 


IBM re- | 


TCO is expected to become 
a bigger selling point with PC 
| vendors, as corporations seek 
costs in the 


ways to reduce 


| current down economy, the an- 


alysts said. 

“Saving $200 on the [pur- 
chase] price of an individual 
PC is important,” DiBitetto 
“But it’s nothing like the 
savings we get from resolving a 
significant percentage of sup- 
port issues at the service desk 
without having to send a tech- 
nician on-site.” D 


said. 


Total cost of ownership of desktop and laptop PCs for businesses: 


Desktop 
Laptop 


Four years 


Three years 


; aid a0) | 
ENTERPRISE PUT Mote 3 


$4,500-$8,000 
$7,500-$11,000 


“Annual cost includes capital cost, cost of administration for the purchase, technical support and user 
costs, such as reduced productivity from problems related to a computer. 


President's Plans Could Help Users, Vendors 


IT depreciation 
change, security 


spending are key | 


BY PATRICK THIBODEAU 
WASHINGTON 


In his approximately 3,900- 


word State of the Union ad- | 


dress last week, President 
Bush said the word technology 
just three times. Even so, he 


| outlined a message that will 


have a direct impact on high- 

tech vendors and users. 
High-tech companies could 

benefit from a rise in federal 


spending on security. In partic- | 


ular, Bush called for increased 
use of technology to track ar- 
rivals and departures at U.S. 
borders. The federal govern- 


ment spent $3 billion last year | 


on IT-related security, and ana- 


lysts said the president’s pro- | 
posed budget, due to be re- | 


leased today, may increase that 
amount by $1 billion. 


“The federal government is | 


our industry’s No. 1 customer 
worldwide,” said Robert Cre- 
santi, vice president of public 


policy at the Business Software 
Alliance, a Washington-based 
trade group. 


that when the federal govern- 


lation, the U.S. Senate last week 


| approved a compromise two- 


“It’s pretty clear | 


ment spends more, the indus- | 


try does better.” 
But IT 
gain if Bush’s support for an 


onates with Congress. 


users also stand to | 


| economic stimulus package res- | 
| ciation 


As part of the stimulus legis- | 


What Bush Wants 


STIMULUS PACKAGE WITH 
DEPRECIATION BONUS. Write- 
offs spread over five years 
would get a 30% bonus in 
the first two years. 


SECURITY SPENDING. A big 
increase is expected to be 
included in Bush’s proposed 
budget. 


BROADBAND. Despite a push 
by high-tech executives to 
make a national broadband 
network a priority, 
silent on the issue. Insiders 
say the White House hasn’t 
worked out a plan but wants 
to support the idea. 


Bush was | 


year, 30% depreciation bonus 
that lets businesses immedi- 
ately write off a much larger 
share of equipment and soft- 
ware purchases than they pre- 
viously could. 

IT managers said the depre- 
bonus may prompt 
them to speed up purchases. 

“I don’t know if we would 
dream up new investmenis, 


|| [but] we would certainly move 


| 





up” some purchases, said Ergin 
Uskup, CIO at United Station- 


| ers Inc., a $4 billion business 


products distributor in Des 
Plaines, Ill. 

Allen Syopys, CIO at PAR 
Pharmaceutical Inc. in Spring 


Valley, N.Y., said, “If you have 


| plans for upgrading your envi- 


ronment would 
accelerate that.” 

The depreciation bonus will 
help the high-tech sector, but 
it won’t necessarily trigger an 


anyway, you 


economic turnaround, said an- | 


alysts. “Maybe it will hasten 
the end of what’s been a capi- 
tal-spending recession,” said 
French Caldwell, an analyst at 


| said. 


Gartner Inc. in Stamford, Conn. 
But many companies bought 
more IT equipment than they 
could “digest very quickly,” he 
“They are still in the di- 
gestion phase.” 

However, IT 
counting the 
depreciation. 

The bonus “is the 
most important issue for the 
tech community right 
said Ralph Hellman, 
vice president of government 
affairs at the Information 
Technology Industry Council 
in Washington. “There are no 
silver bullets to get the tech 
community revived, but this... 
can be very helpful.” 

The U.S. House of Represen- 
tatives last year approved a 
three-year, 30% depreciation 
bonus. But a similar bill in the 
Senate sponsored by Gordon 
Smith (R-Ore.) failed last 
week. Smith, in an amendment 
co-sponsored with Max Baucus 
(D-Mont.), then won approval 
for the two-year bonus. 

Under the plan, if a comput- 
er costs $1,000, the purchaser 
would be able to write off a 
bonus 30% of the cost in the 
first year, plus 20% (the normal 
depreciation spread over five 
years) of the remaining $700. D 


vendors are 


on accelerated 
clearly 


now,” 
senior 
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Wireless LANs 


audit, which detected numer- 
ous holes.” 

To address the problems, 
Embarcadero hired a staff ded- 
icated to cybersecurity, 
and is working with third-par- 
ty software vendors to provide 
additional encryption _ soft- 
ware. 

TXU Electric & Gas in Dal- 
las, meanwhile, has an ongoing 
wireless LAN pilot project at 
its Comanche 
power plant in Glen 
Texas. But the company does- | 
plan wide-scale deploy- | 
ment until it completes a secu- 
rity study, said spokesman | 
Rand LaVonn. 

“We are well aware of the se- 
curity vulnerabilities of wire- | 
less LANs,” LaVonn said. “We | 
do everything we can do to 
make Comanche Peak depend- | 
able and safe.” 

The U.S. Department of En- 
ergy’s Lawrence 
National Laboratory in Liver- 
more, Calif., last month put a | 
temporary ban on wireless | 
LANs, which had been 
stalled in nonclassified areas. | 
Ted Michels, the lab’s acting | 
CIO and principal deputy di- 
rector for computation, said in 
the Jan. 18 issue of the lab’s 
newsletter that “wireless net- 
works and their built-in securi- | 


Rose, | 


n't 


Livermore 


in- | 


ty features have been found | 
under testing to be very inse- | 


in- |2 
stalled firewalls on its routers |z 





We are well 
aware of the 
security vulner- 
abilities of 
wireless LANS. 
We do every- 
thing we can 
do to make 
Comanche 
Peak depend- 
able and safe. 


RAND LaVONN, SPOKESMAN, 
TXU ELECTRIC & GAS 


cure. For this reason, the lab | 


has decided to control the de- | 
ployment of wireless technolo- 
be | 
found to address their security | 


gies until solutions can 


vulnerabilities.” 


Lawrence Livermore spokes- 
man David Schwoegler said 
the lab would keep its wireless 
LANs shut down “as long as it 
| takes to get it right.” He added 


Enhancing Wireless LAN Security 


On Jan. 25, IEEE 802.11 Task Group | approved the Temporal Key 


Integrity Protocol as an optional 


= Temporal Key Integrity Protocol 
(TKIP) provides for initialization 
vector hashing to help defeat passive 
packet snooping. It also provides 

a Message Integrity Check to help 
determine whether an unauthorized 
user has modified packets by inject- 


802.1x standard. 
| ing traffic that enables key cracking. 


= TKIP includes use of dynamic keys 

to defeat capture of passive keys - 

a widely publicized hole in the exist- 

ing Wired Equivalent Privacy (WEP) 
| standard. 


| THE COMANCHE PEAK nuclear power plant will hold off on widespread 
| deployment of a wireless LAN until a security study is completed. 

Peak nuclear | 
| that because of these security 
| concerns, the DOE has a long- 


| of wireless LANs in classified 


| wireless LAN deployment, ac- 
| cording to Alex Froede, man- 


“A number of agencies” have 


| Hard to Detect 


| consulting 


| tary facilities from up to 20 
| miles away. Some of those cas- 
es involved military labs that 


| wireless networks. “To detect 


standing policy against the use | 


areas. 
Federal agencies in general 
have started to clamp down on 





ager of wireless security initia- 


| tives in the U.S. government | 
| division of Plano, Texas-based 


Electronic Data Systems Corp. | 


curtailed deployment until se- | 
curity can be built in upfront, 
he said. 


David Dziadziola, CEO of | 
San Francisco-based security | 
firm Wholepoint 

Corp., said he’s aware of wire- 
less security audits that have 
successfully penetrated mili- 


had other LANs attached to the 


these penetrations is next to 
impossible,” said Dziadziola. 
Brian Ruf, an information as- | 





8 Task Group | is still assessing which 
parts of the Advanced Encryption 
Standard (AES) protocol - which has 
been adopted by the National Insti- 
tute of Standards and Technology - 
to use in 802.11 wireless LANs. 


§ Task Group | will hold its next 
meeting on Feb. 11-12 to finalize the 
draft text. It will then prepare a 
letter ballot for approval of final 
standards. 


| . . 
| hooking it 


surance scientist at CACI In- 
ternational Inc., in Arlington, 
Va., said that in his view, run- 
ning an insecure wireless LAN 
is “essentially the same as run- 
ning a wire from your network 
out to the street and leaving 
the jack loose for anyone to 
plug in.” 

Ruf added that large enter- 
prises face another problem 
before they even try to deploy 
strong security: finding the 
wireless LANs. Wireless LAN 
installations have “run ram- 
pant in large organizations,” 
Ruf said, with users buying the 
relatively cheap gear and 
up to networks 
without the knowledge of the 


| CIO or IT department. 


David Halasz, manager of 
software development in the 
wireless networking business 
unit at Cisco Systems Inc. and 
chairman of IEEE 802 Task 
Group I, which is working on 
wireless LAN security 


already have more robust secu- 


| rity tools to choose from than 


weak, built-in Wi-Fi encryp- 


| tion. And they will have even 


better tools later this year 
when vendors start adding the 
hard-to-crack Advanced En- 
cryption Standard to their de- 


| fensive arsenal. 


Dennis Eaton, chairman of 
the Wireless Ethernet Compat- 
ibility Alliance, said he be- 
lieves that although it’s pru- 
dent for organizations such as 
Lawrence Livermore to de- 
mand tight security, other en- 
terprises can comfortably op- 
erate wireless LANs with to- 
day’s 40-bit Wired Equivalent 
Privacy security. D 


| Reporter Dan Verton contrib- 


uted to this story. 


= Some vendors are already starting 

to incorporate TKIP in new products. 
Old products can be retrofitted with a 
firmware upgrade. 


|} m Expect products with AES built into 


silicon within a year. Software up- 
grades will take less time but will 

also degrade throughput due to larger 
key sizes (128-bit minimum vs. 

40 bits for WEP) and configuration 

of algorithms. 


en- | 
| hancements, said enterprises 
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Better Safe 
Than Sorry 


TIPS ON SECURING YOUR 
WIRELESS LAN: 

@ Make sure built-in 40-bit 
WEP security is turned on. The 
factory default is “off,” but a 
security audit will quickly help 
determine if this is the case. 


@ View wireless LANs as you 
would the Internet. Don’t host 
any systems or provide access to 
data on a wireless LAN that you 
wouldn't put on the Internet. 


® Retrofit existing wireless 
LANs with at least 128-bit 
encryption. 


® Incorporate proposed 802.1x 
standards into your wireless 
LANs. Major vendors currently 
offer products that include rapid 
rekeying and message integrity 
check. 


@ Encrypt all traffic over the 
LAN with a VPN running at least 
FIPS-141 triple DES. 


@ Follow the feds. As soon as 
new hardware (or software) is 
available, upgrade existing ac- 
cess points and devices so they 
can use the Advanced Encryp- 
tion Standard (FIPS-142), the 
method of choice for federal 
agencies planning wireless LAN 
deployments. 


@ Make sure the network door 
is closed. Firewall all systems 
connected to wireless LANs and 
ensure that they are password- 


protected. 
wireless LANs, visit 


ick 
Quick. our Web site 


www.computerworld.com/q?26942 


For more on he 
pervasiveness of 


ONLINE RESOURCES: 

= IEEE 802.11 Task Group | 
http://grouper.ieee.org/groups/ 
802/IV/index.html 


® Advanced Encryption 
Standard 
http://csrc.nist.gov/ 
encryption/aes/ 





COMPUTERWORLD February 4, 2002 
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Airline Web Sites Seen as 
Riddled With Security Holes 


But one airline is taking steps to protect 
itself against browser-based attacks 


BY DAN VERTON 
NCREASING concerns 
about the potential for 


hackers to manipulate | 


critical back-end admin- 
istrative systems through 
security holes commonly found 
in corporate Web sites have 
prompted at least one major 
airline to take preventive mea- 
sures. 
“We are trying to defend our 


Web sites,” said David Yaacobi, | 


information systems security 
manager at E] Al Israel Airlines 
at Ben-Gurion International 
Airport in Lod, Israel. “Hack- 


ers could go inside your Web | 


sites and inject wrong or mali- 
cious code.” 

El Al has deployed Sanctum 
Inc.’s AppShield 3.1 Web ap- 
plication firewall technology. 


| 
| 
| 
| 
| 
| 
| 


| That deployment comes on the | 


heels of a security audit of a 
major U.S. airline conducted 
by the Santa Clara, Calif.-based 
vendor. According to Sanctum 
| CEO Peggy Weigle, during that 
audit the airline’s Web-based 
systems were breached. The 
security team that conducted 


| way into the airline’s back-end 
| systems, including the reserva- 
tion and maintenance systems, 
Weigle said. 

“Through a hole in the [front- 


| able to get to the back-end sys- 


| cation,” said Weigle. “We could 
have obviously obtained pas- 
senger manifests, maintenance 
systems and _ whatever 





end] application code, we were |< 


source code of the entire appli- |: 


there.” The airline, which Wei- 
gle refused to identify for secu- 
rity reasons, still hasn’t fixed 
the problems, she said. 

Dan Meehan, CIO of the 
Federal Aviation Administra- 


| 
| 
| 
| 
| 
| 
| 


tion, said he received a briefing | 


on the audit from Weigle and 
noted that the FAA is working 


| Op a more aggressive outreach | 


the audit managed to make its | 


tems and able to download the |< 


was | 


program focused on the air- 
lines. “We want 
specific piece of information 


to take this | 


and compare notes with a few | 


other airlines to see if this is an 


How Hackers Get In 


isolated or not,” said 


Mehan. However, he said, it’s 


case 


| access to data or transactions 


too early to tell whether the | 


audit did in fact uncover a sig- 
nificant breach of security. 

For his part, Yaacobi isn’t 
taking any chances. Although 
E] Al’s reservation systems run 


| on protocols that are “totally 
different than [standard Inter- | 


| with the White House to devel- | 


net protocols] and are very dif- 


ficult to hack,” Yaacobi said the | 


potential is still there, and El Al 


protect them. 
“Since Sept. ll, 


Browser-based attacks exploit bugs and holes in Web-based 
application code. Vulnerable software includes: 


= User interface code, which provides the look and feel of the site. | 


= The Web server, which supports the physical communication 
between the user’s browser and the applications. 


= The front-end system, which interfaces directly with the 


user interface code, operating system and back-end 


Microsoft Taps Former DOJ Cybercop 


Charney to head 
company’s security 


BY DAN VERTON AND 
DEBORAH RADCLIFF 


Microsoft Corp. last week 


named Scott Charney, the for- | 


mer chief of computer crime at 


the U.S. Department of Justice | 


(DOJ) and a partner at New 
York-based Pricewaterhouse- 
Coopers, as its new chief se- 
curity strategist. He replaces 
Howard Schmidt, who left the 
company Jan. 28 to join the 
Bush administration. 
The announcement 
late Jan. 31 after Computer- 
world’s Web site broke the 
news of Charney’s appoint- 
ment earlier in the day. Char- 
ney, who had confirmed his 
selection in a telephone inter- 


came | 


| April 1. 


|} cate a major shift in responsi- 
bilities, said Charney. Rather, 


description of the role Howard 
| had been filling,” he said. “I 
will be working to secure prod- 
ucts and services and develop- 
ing domestic and international 


secure infrastructure.” 

Microsoft officials declined 
to comment on the appoint- 
ment at first, but later issued a 
statement touting Charney’s 
credentials. 


computer security experts, 
Scott has wide-ranging experi- 
ence in cybercrime and com- 
puter forensics, which will 





view, assumes his new position 


The change in title from 
chief security officer to chief | 
| security strategist doesn’t indi- 


it’s “actually a more accurate | 


polices that support a more | 


“As one of the industry’s top | 





make him an essential mem- 


ber of Microsoft’s Trustworthy | 


Computing leadership team,” 


said Craig Mundie, chief tech- | 


nical officer at Microsoft. 

Sources close to the inter- 
view process said that while 
they wouldn't necessarily place 
Charney on the short list of 
top IT security experts in the 
country, he landed the 


DOJ, where he 
earned a reputation 
as a skilled and 
staunch antihacking, 
cybercrime hardliner. 

“I realized that 
[one Microsoft exec- 
utive] in particular 
looking for 
someone with signif- 
icant [government] 
ties and current con- 
tacts,” said a source 


was 


job | 


| around their real 


CHARNEY knows 
“the damage that 
the bad guys do.” 


systems. 


close to the selection proc- 
ess. Microsoft “saw Howard 
[Schmidt] as unique and want- 
to define the 


ed position 


needs and 


| does whatever is necessary to | 


any illegal | 


the strengths of the new [ex- 


ecutive].” 


Schmidt left Microsoft 


to | 


become vice chairman of the | 
| cause of his technical back- 
| ground but because of his 
| experience at the DOJ. 


President’s Critical Infrastruc- 
ture Protection Board and is 
admired by many throughout 
industry and government for 
having a rare combination of 


technical and _ interpersonal 


| because of his long career at | skills, especially on Capitol 
| the 


Hill. 

Eric Friedberg, a 
former computer 
crimes coordinator at 
the DOJ who report- 
ed to Charney in- 
directly, called him 
one of the “shining 
lights” in information 
security. “He’s got 
national credibility,” 
said Friedberg, who 
credited Charney 


through our company Web site 
is viewed by us as a terrorist 
act,” said Yaacobi. “With regu- 
lar attempted attacks on our 
site, we view Web application 
security critical to our overall 
security plan ensuring the 
safety of our customers.” 

Various Israeli government 
agencies deployed AppShield 
during the 2000 cyberconflict 
between pro-Palestinian and 
Israeli hackers. 

John Pescatore, an analyst at 
Stamford, Conn.-based Gart- 
ner Inc., said Web application 
security is a serious problem 
for two-thirds of all corporate 
Web sites. 

“The current generation of 
firewalls focuses on the net- 
work level, kind of like the 
walls of a fort stopping direct 
attack,” said Pescatore. “How- 
ever, close to 75% of today’s 
attacks are tunneling through 
applications. Application-level 
firewalls are something that 
any critical infrastructure 
company needs to look at.” D 


ick 
Tk 


www.computerworld.com/q?26929 


IT executives 
with DOT Secretz 
Norman Mineta to dis 


DUSS airline security 


with developing the DOJ’s 
computer crime and intellec- 
tual property division. 

Alan Paller, research direc- 
tor at the SANS Institute in 
Bethesda, Md., said Charney 
is the best candidate to carry 
on Schmidt’s Trusted Com- 
puting initiative — not be- 


“Remember the job [Char- 
ney] has to do. He has to 
get marketing-driven develop- 
ment people to delay, assess 


| and correct their tools so they 


| 
| 
| 
| 
| 


cause harm to the 
outside world,” Paller said. 
“[Charney] is probably the 
best guy in the country to pull 
that off, because he 
from the purest understanding 
of the damage that the bad 
guys do. What a brilliant 
choice, because you have to 
prove to some very 
willed people that it’s worth 
doing this right.” D 


do not 


comes 


strong- 
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THIS FACILITY IS 
SUBJECT TO 
SUDDEN SHIFTS 


IN SCALE. 


When you think scalability, it’s time to think software. 


Today's Web-driven world demands a faster way to scale up The Microsoft server platform gives you the choice of thinking 
and out. But instead of thinking hardware, it’s time to think smarter bigger, smaller, up, or out. That way you can deploy Microsoft SQL 
software, as in the modular and scalable Microsoft” server platform. Server™ 2000 on Windows’ 2000 Datacenter Server for heavy- 

duty ERP and transaction processing, and scale up to support 
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terabytes of data and millions of transactions. Or scale out with 


Microsoft Application Center 2000 by adding clusters of Windows 








2000-based servers running distributed applications. And it has 


the lowest price-to-performance ratio of any competitive platform." 


So no matter how quickly things change, your business is 


always perfectly scaled to handle it. For more ways to scale 
up—and out—with software, visit us at microsoft.com/servers 


/scalability Software for the Agile Business. 
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Lotus Ties Notes, Domino 
‘To Java for Web Services 





Messaging, collaboration releases will support. J2 2EE specification 





BY JENNIFER DiSABATINO 


AKE BUENA VISTA, FLA 
SING JAVA 2 En- 
terprise Edition 
(J2EE) as the 
linchpin, Lotus 
Software Group 
and parent IBM last week laid 
out an integrated collaboration 
and Web services strategy for 
Notes and Domino. The plan 


made some large users happy 
customers 


but left smaller 
wondering how it will affect 
their development strategies 


At its annual Lotusphere | 


user conference here, Lotus 
announced that it is basing its 


Web services strategy on J2EE. | 


Notes 6 and Domino 6 will 
support the specification and 
include J2EE-compatible de- 
velopment tools when they’re 


released for beta testing this | 
month. Shipments are due to | 


start in the third quarter. 

Large Lotus customers, such 
as Hewitt Associates LLC in 
Lincolnshire, IIl., 


the J2EE plan. 

Frank Butstraen, head of col- 
laboration and Web services 
initiatives at Philips, said he 
plans to make significant in- 


vestments to integrate Domino | 


with Web services. By using 
J2EE as a standard, Lotus will 
allow Philips to cut out some 
of the expensive, third-party 
middleware technologies it 
now uses, he said. 

Likewise, Scott Pitt, manager 
of the knowledge management 
group at Hewitt, said the J2EE 
announcement came as no sur- 
prise to his company, which 
plans to build Web services ap- 
plications on top of Domino 6. 

One of the goals of the new 


Quick 
I me for messaging mar- 
a ket share, visit 


www.computerworld.com/q?26934 


To read about Lotus’ 
battle with Microsoft 


and Amster- | 
dam-based Philips Electronics | 
NV, were heavily consulted on | 
| cerns, Oracle Corp. last week | 





strategy is to entice users to 


| run all-IBM software shops by 


making it easier to integrate 
Domino and Notes with IBM’s 
WebSphere application server 
and the system management 
tools developed by IBM sub- 
sidiary Tivoli Systems Inc. 

“I'm not going to say that 
they’ve got every piece of the 
puzzle, but they’ve got a lot of 
them,” said Dana Gardner, an 
analyst at Aberdeen Group Inc. 
in Boston. 

Eugene Stein, director of 
information and professional 
services at New York law firm 
Shearman & Sterling, said he is 


looking for reassurance from 
Lotus that his investment in 
Domino will be protected as he 
moves forward with Web ser- 





vices. With J2EE, that appears 
to be the case, he said. 

But Domino 6 won't have 
the native ability to put some 
J2EE-compliant applications in 
Web containers, which use 
servlets, Java server pages and 
Enterprise JavaBeans to push 
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applications out to the Web. 
WebSphere development tools 
will have to be used for that. 

Some developers expressed 
concern about that scenario 
during a session at the confer- 
ence on J2EE development in 
Domino 6. But Jeff Calow, a 
senior technical staff member 
for messaging and collabora- 
tion at Lotus, said IBM’s Web- 
Sphere Developer software 
will be bundled with Domino 6 
at no extra cost. 

IBM continues to offer col- 
laborative tools that can be 
used in mixed application en- 
vironments, said Daniel Ras- 
mus, an analyst at Giga Infor- 
mation Group Inc. in Cam- 
bridge, Mass. That differenti- 
ates it from rival Microsoft 
Corp. and lets users deploy 
products such as Lotus’ Quick- 
Place online meeting software 
without using Domino and 
Notes as their collaborative 
and messaging infrastructure, 
Rasmus added. D 





Oracle Puts Limits on New Software Pricing 


Users must spend 
$250,000 to qualify 


BY MARC L. SONGINI 
Looking to assuage user con- 


finally offered up details on its 
new flat-fee business applica- 
tions pricing scheme — in- 
cluding a $250,000 minimum 
purchase requirement. 


Companies will also have to | 


buy software licenses for at 
least 20% of their workers to 


| qualify for the flat-fee pricing 


(see chart). Jacqueline Woods, 
vice president of global prac- 
tices at Oracle, said the new 


| approach is an attempt to re- 


duce costs and licensing com- 
plexities for large companies 
that are standardizing on its 
E-Business Suite lli software. 
Oracle claimed companies 
that qualify could cut the prices 
they pay by up to 75% per 
user through the new pricing, 
which sets all-encompassing 
lli license fees of $4,000 for 
full-fledged users and $400 


who need to 
such things as 


workers 
only 


| for 
} access 


self-service applications. 


weeks after Oracle CEO Larry 
Ellison announced the flat-fee 
plan without fully spelling out 
what it would entail. But some 
users said they’re still not sure 
whether the new pricing will 
benefit them 

Jeremy Young, president of 
the Atlanta-based Oracle Appli- 
cations Users Group (OAUG), 


tions about what the flat-fee 
scheme means for users. 


| pletely clear,” he said. 
| like to see some [real] exam- 
ples ... so we can do compar- 
isons.” Some OAUG members 
were having trouble getting 
price quotes from Oracle’s 
sales force, added Young, a 
business process manager at 
DHL Worldwide Network NV 
in Brussels. 

In a preliminary statement 





e-procurement and employee | 


The move to clarify how the | 
| new scheme works came two | 


said the independent organiza- | 
tion continues to have ques- | 


“So far, we're still not com- | 
“We'd | 





about the new approach, the 
OAUG’s pricing council said 


Oracle’s stated objective is to | 
} ponent” 


lower costs for users that buy 
the full lli suite. “This pricing 
model seems to favor business- 
es that adopt that philosophy,” 
the council said. 

Ken Gordon, an IT manager 
for the city government of 
Oakland, Calif., said he plans to 
upgrade to lli by year’s end. 


Details, Details 


How Oracle’s new flat-fee 
pricing works: 

@ Licenses for “professional” 
users who need full access to one 
or more applications are priced at 
$4,000 per person. 


= Fees for users who need only 
self-service tools, such as Oracle's 
expense-reporting module, are 
priced at $400 per worker. 


@ To qualify, companies have to 
spend at least $250,000 and buy 
licenses for 20% of their 
employees. Half of those 
must be for professional users. 





But the city’s IT budget is ap- 
proved well in advance of such 
projects, and he said any pric- 
ing changes that impact the 
budget “could be devastating.” 
However, Woods said Oracle 
will maintain its current “com- 
pricing, in which ap- 
plications are sold individually, 
for users who don’t qualify 
for the flat-fee model or don’t 
want to buy the full lli suite. 
The flat-fee pricing was due 
to take effect Friday, Woods 
said. In a switch from what 
Ellison announced, the license 
fees don’t distinguish between 
“power” users and “casual” 
users. Anyone who uses the 
core functionality of an appli- 
cation would need to have the 
more expensive “professional” 
license, according to Woods. 
The $4,000 fee for full appli- 
cation access is a bargain for 
companies with users who 
need to access multiple lli mod- 
ules, said Erin Kinikin, an ana- 
lyst at Giga Information Group 
Inc. in Cambridge, Mass. But 
it’s not so attractive for users 
who work with only one appli- 
cation, she added. D 
Joris Evers of the IDG News Ser- 
vice contributed to this report. 
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Allmerica Taps Keane 
For Application Work 


Worcester, Mass.-based Allmerica 
Financial Corp. signed a seven-year 
deal to outsource development and 
maintenance of applications for its | 
property and casualty insurance 
systems to Keane Inc. About 140 
Aiimerica IT workers are being 
transferred to Boston-based Keane 
as part of the deal, which comes 13 
months after the companies signed 
a similar agreement for Allmerica’s 
variable annuity unit. 


Microsoft: Win 2000, 
NT 4.0 Domain Flawed 


Microsoft Corp. warned that a flaw 
in the way its Windows 2000 and 
Windows NT 4.0 server operating 
systems authenticate users across 
domains could allow a user with ad- 
ministrator privileges to extend that 
power to other domains. The vulner- 
ability is “extremely difficult” to ex- 
ploit, Microsoft said, but it added 
that the worst-case scenario posed 
by the flaw is serious. 


IT to Play Big Role 

In Railroad Project 
Brookings, S.D.-based Dakota, Min- 
nesota & Eastern Railroad Corp. said 
it plans to rely heavily on technology 
as part of a $1.5 billion, 880-mile 
railroad construction project in 
Wyoming and South Dakota. The 
project will include computer model- 
ing of train operations and the devel- 


opment of a communications-based 
control system, the company said. 


Short Takes 


Santa Clara, Calif.-based PALM 
INC. announced a handheld device 
with built-in wireless capabilities 
that’s designed to provide secure 
links to corporate e-mail servers. 
..- INTEL CORP. and HEWLETT- 
PACKARD CO. said they plan to 
support an effort to create an open- 
source version of MICROSOFT’s In- 
ternet-based .Net technology. 
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Managers Make 


| Application integration gains in importance, 


but packaged tools still a challenge to use 


BY MICHAEL MEEHAN 
OR SOME LARGE com- 
panies, the need to 
tie together incom- 
patible systems has 
grown to the point 

that the main mission of their 

IT departments is shifting from 

application development and 

support to integration. 

Users such as Corporate Ex- 
press Inc., Best Buy Co. and 
Union Pacific Corp. said they 
no longer have any choice 
about braving the rigors of 
building an enterprise appli- 
cation integration (EAD) infra- 
structure. EAI tools still have 
a reputation as being difficult 
to use, but IT managers at 
those companies said trying to 
cope with “application spa- 
ghetti” is worse. 

“We really need to make in- 
tegration a central part of every 
IT initiative,” said Marty Mal- 
ley, director of information sys- 
tems at Omaha-based Union 
Pacific. For example, he said, 
the railroad has to find a way to 
deliver real-time pricing infor- 
mation from its systems to 
freight customers in the oil and 
gas industries. 

“That price data touches 
many internal systems, and 
now we’ve got to find a way to 
tie it all together,” Malley said. 





In November, Union Pacific 
began working with EAI tools 
developed by Palo Alto, Calif.- 
based Tibco Software Inc. 

Once in place, the integra- 
tion framework will also be 
used to help migrate compo- 
nents of the railroad’s core 
transportation control system 
off of its mainframes. But Mal- 
ley said the railroad hasn’t set a 
full road map for the EAI work. 
He also wouldn’t comment on 
the project’s expected cost. 


EAI Expansion 

Monty Sooter, CIO at Corpo- 
rate Express, said EAI technol- 
ogy will play a role in all four 
of the major IT projects the 
Broomfield, Colo.-based office 
supplies distributor plans to 
take on this year. “We made a 
business decision that the [in- 
tegration] infrastructure has to 
be correct,” Sooter said. “If it’s 
not, we’re not going to be able 
to move forward.” 

In a project that began 18 
months ago, Corporate Ex- 
press initially used EAI tools 
developed by Fairfax, Va.- 
based webMethods Inc. to in- 
tegrate its systems with the 
business-to-business applica- 
tions of 120 large customers. 

Now, Sooter said, the com- 
pany plans to use the tools in 
rollouts of Dallas-based i2 
Technologies Inc.’s online pro- 
curement and warehouse man- 
agement applications. They 
will also be used as part of proj- 
ects aimed at improving infor- 
mation feeds to Corporate Ex- 
press’ suppliers and for devel- 
oping an online system for pay- 
ing its sales force. The EAI 
layer will funnel data among 
various databases and front-end 
system interfaces, Sooter said. 

Tyler McDaniel, an analyst 
at Hurwitz Group Inc. in Fram- 





Projects a lop 


We really 
need to make 
integration a 

central part 
of every IT 
initiative. 
MARTY MALLEY, DIRECTOR OF 


INFORMATION SYSTEMS, 
UNION PACIFIC 


ingham, Mass., said early ver- 
sions of EAI tools were diffi- 
cult to use. But improved busi- 
ness object, repository and 
graphical user interface capa- 
bilities have lessened their ar- 
cane nature, he said. 
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However, EAI projects can 
still be long and hard. 

For example, Best Buy plans 
to use webMethods’ tools to 
patch its electronic data inter- 
change (EDD trading partners 
into a new Windows 2000 
server backbone that’s being 
installed to run its inventory 
and financial systems. 

The Eden Prairie, Minn.- 
based electronics retailer has 
such a heavy volume of EDI 
transactions that it’s running 
short of the nightly downtime 
needed to complete its batch 
processing, said Patricia Ves- 
sey, e-business communica- 
tions manager at Best Buy. 

The webMethods tools will 
translate data among various 
systems for real-time transac- 
tion processing of purchase or- 
ders and invoices, Vessey said. 
But she estimated that it will 
take two years to do the re- 
quired data-conversion work. D 


EAl Adopters Face Steep Learning Curve 


Steve Kaufman and his staff have 
entered EAI boot camp. 

Kaufman, director of IT infra- 
structure for the Goshen, Ind.- 
based Mennonite Mutual Aid As- 
sociation, is responsible for devel- 
oping an integration framework 
based on tools from Vitria Tech- 
nology Inc. in Sunnyvale, Calif. 
The EAI setup is expected to help 
the health care organization 
migrate its core applications from 
IBM AS/400s to Windows NT 
servers and more than double its 
system-to-system interfaces over 
the next five years. 

But Kaufman said IT workers 
at Mennonite Mutual Aid are still 
learning how to use Vitria’s tools, 
a process that will likely take sev- 
eral more months. “It's complex 
software, and there's lots of train- 
ing involved,” he said. “It’s going 
to be a while before we can do 
any testimonials.” 

The IT team at Best Buy started 


learning the ins and outs of web- 
Methods’ EAI software in August. 
“We're finding it’s complex, but we 
need to learn it if we want quicker 
reconciliation and better data accu- 
racy in our e-commerce systems,” 
said David Nelson, products capa- 
bilities manager at Best Buy. 

Best Buy wants to convert its 
EDI trading documents to an XML 
format. But that will require de- 
tailed data-mapping work, Nelson 
said. He added that the company 
also needs to set well-defined 
workflow routines for the data that 
it plans to funnel through the EAI 
infrastructure. The data comes 
from more than 600 suppliers. 

Also, since XML lacks EDI's 
maturity, it doesn’t cover all of the 
same trading contingencies. Nel- 
son noted that webMethods has 
pledged to address any problems 
that may arise as Best Buy goes 
through the mapping process. 

- Michael Meehan 
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Packaged Apps Not 
Always a Good Fit 


Retailers need more scalability, features 


BY CAROL SLIWA 
ETAIL-SECTOR CIOS 
said last week that 


they still face chal- | 


lenges finding 
packaged software 
to meet their needs, particular- 
ly in the supply chain areas. 
Such difficulties plagued 
Kmart Corp., which took a $130 
million write-off in September 
for supply chain software and 
hardware. The Troy, Mich.- 
based retailer sought 
ruptcy protection last month 
due to business problems that 
were exacerbated by the need 


to enhance supply chain sys- | 
| gress in this area by some ven- 
| dors,” Miller said, noting that 


tems, analysts have said. 
Retailers face such unique 


LER ERT LEER OLE 


Retail Ware 


Major systems that a typical 
large retailer might use 
include the following: 


Store systems 
= Point of sale 

Time and attendance 
= Loss prevention 


Headquarters 

® Merchandise planning 
and management 

= Pricing and promotions 
management 

= Demand forecasting 

# Assortment planning 


® Space optimization 


Back-office systems 
aFinanciel 


m= Human resources 


Supply chain systems 
8 Inventory management 

® Replenishment management 
® Transportation management 
@ Warehouse management 

= Supplier sourcing 

= Supply chain collaboration 


bank- | 





Cre LL 


business issues that they have 
often been forced to write their 


| own software or heavily cus- 


tomize packaged applications. 
Several retail CIOs said com- 
mercial offerings are improv- 
ing, but it’s still hard to find ad- 
equate supply chain software. 
Jerry Miller, CIO at Sears, 
Roebuck and Co., said most of 
the Hoffman Estates, [ll.-based 
retailer’s supply chain systems 
are homegrown because pack- 
aged applications haven’t been 
able to scale to handle the high 
transaction volume and mas- 
sive inventory Sears has. 
“There has been some pro- 


Sears is starting to evaluate 
packaged applications. “If it 
can be shown that we can in- 
stall, run and support a pack- 
aged [product] less expensive- 
ly than homegrown, we have 
no problem bringing it in.” 

But right now, Sears finds it- 
self turning to in-house IT 
staffers to design systems to 
scale and integrate its applica- 
tions, Miller said. 

Phillip Maxwell, CIO at The 
Neiman Marcus Group Inc. in 
Dallas, said his company has 45 
stores — far fewer than Sears 
or Kmart — but is still “push- 
ing the limits” of some soft- 
ware packages. Nevertheless, 
Maxwell said, Neiman Marcus 
will probably purchase a new 
merchandising system in a 
couple of years to improve 
data analysis capabilities. 

“It may not hit everything 
that Neiman Marcus wants to 
do,” he said. But the system 
will provide a quicker way to 
get more functionality, easier 
upgrades and the chance to 
lessen the need for in-house 
development, Maxwell said. 

Some retailers have found 
themselves modifying pack- 
aged applications so heavily 
that that they have essentially 





rewritten them. Kmart, for in- 
stance, said it extensively cus- 
tomized a warehouse manage- 
ment system from  Dallas- 
based Exe Technologies Inc. A 
Kmart spokeswoman claimed 
that the Exe package “was not 
doing the job we needed it to 
do,” so Kmart decided to take a 
write-off on the software in 
September, even though it had 
just been installed in 1997. 

Exe CEO Raymond Hood 


said his firm advised Kmart | 


against heavy customization. 
He contended that the ware- 





house management system 
could be upgraded and serve 
the retailer well, as it has at 
other firms, including one of 
Kmart’s major suppliers. 
Several retail CIOs said 
they’re trying to avoid heavy 
customization. Wolly Morin, 


| CIO at New York-based Ann 


Taylor Retail Inc., said modify- 
ing packaged software can open 
the door to lots of problems. 


Lesson Learned 

Bill Finefield, CIO at Vir- 
ginia Beach, Va.-based Navy 
Exchange Service Command 
(Nexcom), which handles $2 
billion in sales across 1i2 stores 
and about 500 selling loca- 
tions, learned about the dan- 
gers of customization the hard 
way. In 1993, prior to Fine- 
field’s arrival, Nexcom decided 


Teddy Bear Maker Prepares for 
Second Attempt at ERP Rollout 


BY MARC L. SONGINI 
After a three-year saga that in- 
cluded a $10.3 million financial 
hit from the failed installation 
of packaged applications, ted- 
dy bear maker Russ Berrie and 
Co. is taking another crack at 
retiring its legacy systems. 

The Oakland, N.J.-based dis- 
tributor of toys and gifts last 
week finalized plans to roll out 
J.D. Edwards & Co.’s OneWorld 
Xe suite of enterprise resource 
planning (ERP), customer rela- 
tionship management and fi- 
nancial applications. The mul- 
timillion-dollar project _ is 
scheduled to be done in phases 
over the next 18 months. 

Russ Berrie CIO Michael 
Saunders said that the compa- 
ny, which had sales of $225 mil- 
lion during the first nine 


months of last year, hopes the | 


OneWorld system will help it 
reach $1 billion in annual rev- 
enue in the coming years. 
Within the next 12 months, 
he said, Russ Berrie plans to 
begin installing the applica- 
tions one department at a time, 
starting with a stand-alone im- 
plementation in purchasing. 
“We're not going big bang,” 
Saunders said. “We’re mitigat- 





The Bear 
Necessities 


Russ Berrie and Co. CIO 
Michael Saunders offered the 
following advice to IT man- 
agers planning ERP projects: 
UNDERSTAND YOUR COMPANY'S 
BUSINESS NEEDS and develop well- 
documented technical requirements 
before considering proposals from vendors 


MAKE VENDORS DO SOFTWARE 
DEMONSTRATIONS that involve your 
company’s specific business processes. 


KEEP BUSINESS USERS INVOLVED in 
the decision-making process to ensure that 
the software you choose is a good fit 


ing implementation risks by 
taking a phased-in approach.” 

The company has reason to 
be cautious. Three years ago, a 
Y2k-related migration from its 
homegrown distribution, fi- 
nancial and customer service 
systems to packaged ERP ap- 
plications hit a brick wall. 
Saunders said the problems 
were severe enough for Russ 
Berrie to take many of the new 
applications off-line. 

That forced the company to 








| resurrect 
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to replace obsolete, decentral- 
ized homegrown systems with 
packaged merchandising, plan- 
ning, distribution, human re- 
sources and financial systems. 

Some of that software was so 
heavily customized that Nex- 
com had to do extra work to 
make it Y2k-compliant, rather 
than being able to rely on the 
vendors’ fixes. “We were guilty 
of doing heavy customization, 
and we have now learned our 
lesson,” Finefield said. 

Nexcom now plans to re- 
place two of its 5-year-old ap- 
plications with a major new 
merchandise package from 
Minneapolis-based Retek Inc. 

Finefield said that this time, 
Nexcom will “go with as pure a 


| product from the vendor” as 


possible to speed deployment 
and simplify maintenance. D 


its aging Digital 
Equipment Corp. VAX systems 
and make them Y2k-compli- 
ant. “It was not a fun process,” 
Saunders said, adding that it 
strained both the IT depart- 
ment and business units. 

Saunders wouldn't identify 
the software vendors that were 
involved in the failed imple- 
mentation, but sources said 
that SAP AG’s applications 
were part of the 1999 project. 

A spokesman at SAP con- 
firmed that Russ Berrie was 
one of its customers, but he de- 
clined to offer further details 
because of pending litigation 
between the two companies. 

Joshua Greenbaum, an ana- 
lyst at Enterprise Applications 
Consulting in Daly City, Calif, 
said it appears that Russ Berrie 
“bit off more than they could 
chew” on the 1999 project. 
Companywide rollouts are es- 
pecially risky for midsize busi- 
nesses, Greenbaum said. 

In an attempt to protect itself 
the second time around, Saun- 
ders said, Russ Berrie hired a 
law firm with experience in 
the IT market. Washington- 
based Shaw Pittman LLP as- 
sisted the company during the 
software selection process. 

Saunders declined to dis- 
close the exact cost of the J.D. 
Edwards project. Some limited 
software customization work 
will be required, he said. D 
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Trade Matching Causes Integration Headaches for Banks 


BY LUCAS MEARIAN 

One of two companies vying to 
offer automated trade-match- 
ing capabilities to the brok- 
erage industry announced last 
month that 17 Wall Street firms 
have signed up for its services. 
But banks that process stock 
trades will likely end up having 
to integrate their back-end sys- 
tems with the networks of both 
trade-matching providers. 

That prospect doesn’t sit 
well with Tom Perna, senior 
executive vice president of in- 
vestment services at The Bank 
of New York Co. “It’s absolute- 
ly ridiculous that we’re essen- 
tially having to do the work 
twice,” he said. 

For users like Bank of New 
York, such integration projects 
are expected to require mil- 
lions of dollars and thousands 
of man-hours. “Relative to Y2k, 
it’s not as big, but it is a sizable 
undertaking,” Perna said. 


Bank of New York is one of 


five so-called custodial banks 
that signed up two weeks ago 
to use the trade-matching ser- 
vices of Boston-based Omgeo 
LLC. The banks work with bro- 
kerages to authorize the re- 
lease of funds that are used to 
cover stock trades as they are 
finalized — a process that can 
take several days. 


Picking Up the Pace 

As part of an effort to speed 
up that process, rival services 
are offering to let brokerages, 
banks and clearinghouses 
match data about trades via IP- 
based virtual private networks 
linked to back-end mainframes. 

Omgeo, which is jointly 
owned by Depository Trust & 
Clearing Corp. in New York 
and Thomson Financial in Bos- 
ton, competes with the Global 
Straight Through Processing 
Association (GSTPA) in Zurich. 

While the Securities and Ex- 
change Commission is forcing 
Omgeo and the GSTPA to set 
up portals for sharing informa- 
tion, Perna and others in the fi- 
nancial services industry said 
they would rather see the two 
services combine to set up a 
singie matching engine. “What 
started out as an absolutely 





| great idea with the GSTPA has 


turned into a cross-border po- 
litical nightmare,” Perna said. 
Bank of New York has al- 


ere IL, 
focuses on 


ey 


and its power 
to boost profits, 
CRM, and 
success 





communications, 


powerful new e4world success — 
all-impagtant security. 


ready begun work on connect- 
ing its processing systems to 
Omgeo’s matching engine and 
expects to complete the inte- 
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gration this year, he added. 


Gary Foster, chief technology 
officer at Omgeo, said the inte- | 
| gration process takes a matter 


| 
| 
| 
| 
| 
| 


of months in most cases. Even a 
brokerage or bank with highly 
automated back-end systems 
has to use Omgeo’s applica- 
tion programming interfaces 
and messaging specifications, 
he noted. D 
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combination of servers and operating systems that will finally bring together your company’s various 
departments. Meanwhile, sales is pushing to get the CRM software installed 


by the end of the quarter. Marketing is screaming for help with the new Web 


initiative. Manufacturing is late implementing the next phase of the ERP system. 
And you're stuck there in the middle of the crossfire, glancing around the nerve 
center of your enterprise, waiting for the inspiration to arrive. 

It would help if the servers you were working with were designed for 
the reality of today’s complex business environment. 

At HP we always approach servers from the systems level, taking the 
extra time to consider how they work with your infrastructure as a whole. That's 
why we offer a broad range of server solutions that allow you to choose the 
ideal OS for your needs and preferences—from high-end enterprise systems to 
server appliances to blades. 

All come bundled with sophisticated management tools that make it 
easier for you to manage your infrastructure across multiple operating systems. 
And as codeveloper of the next-generation multi-OS platform—the Itanium’ 
architecture—HP is in the unique position to make future upgrade paths a 
totally seamless experience. 

HP infrastructure solutions—servers, software, storage, services and 
beyond—are engineered for the real world of business. Because the last time 
we checked, that’s where we all work. Call 1.800.HPASKME, ext. 246. Or visit 
www.hp.com/go/infrastructure. 


infrastructure: it starts with you. 
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New Sony ClO to Focus on Tighter Integration 


Plans to centralize 
IT operations, push 
common processes 


BY JULIA KING 
Sony Electronics Inc. last 
week named James Milde as its 
CIO, giving him responsibility 
for IT at eight major manufac- 
turing operations in North 
America and 100 other facili- 
ties in the U.S. Milde, 41, fills a 
job last held by Bill Gauld, 
who left the Park Ridge, N_J.- 
based consumer electronics 
maker three months ago to 
take another job. Milde was 
previously CIO at The Pepsi 
Bottling Group Inc. in Somers, 





NY. In his new role at Sony, 
Milde will serve about 20,000 
users. He spoke with Comput- 
erworld about his plans for the 
company, which accounts for 


| about 60% of parent Sony 


Corp.’s total revenue. 


What are your top priorities going 
into the new job? First, getting to 
know the people in the IT or- 
ganization and the business 


| people. ... There’s a great op- 


portunity here to get tighter 
business alignment between 


| the business functions and the 


IT organization. We have [var- 
ious] legacy systems where 


| everything is done differently, 
| so there’s a huge opportunity 
| to rethink the whole business 


process. We also have multiple 


ing a technology partner, 
rere are many things to look for. 


| big initiative is 





[sales] channels, and in some 
of those channels, we also 
have multiple business mod- 
els. We want to move toward 
common processes. 


What kinds of IT projects will that 
involve? The top IT projects 
will be in three areas. The first 
is order management and or- 
der fulfillment. We 

have a large project 

in the works with 

Oracle’s order man- 

agement [software] 
supporting our cus- 

tomized computer 

business. Another 


around using SAP 
[applications] to 
replace our legacy 





SONY CIO Milde: 
ROI on IT projects 
will be a priority. 


order management systems 
for the electronics business. 
... There’s also a lot of work 
around data warehousing and 
data mining. 


Are there any particular challenges 
associated with taking on a new 
CIO position in the midst of an eco- 
nomic downturn? For example, are 
you under increased pressure to 
demonstrate a positive ROI from 
technology investments? Ab- 


| solutely. With every project — 


whether a company 
is fat, dumb and hap- 
py or economically 
challenged — you 
have to look at proj- 
ect ROI from a capi- 
tal perspective and 
really force the busi- 
ness case around it. 
Too many compa- 
nies don’t put that 
kind of rigor in up- 
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front. That’s a discipline that, 
if it’s not here, we'll make sure 
it gets put in place. We also 
want to make sure we have the 
right processes in place to 
make sure big projects not 
only get funded but have the 
staying power to have [senior 
management’s] commitment 
day in and day out. 


How will you organize, or reorga- 
nize, Sony's IT group? The IT 
organization was very decen- 
tralized. It’s by and large the 
reason we have a lot of dis- 
parate legacy systems that 


| don’t talk to each other. As 


part of my accepting this posi- 
tion, it was important to me to 
have one IT organization with 
one culture, one set of tools 
and one set of methodologies 
to build solutions going for- 
ward. So we have [already] 
restructured. D 


The above logo represents the pinnacle of business technology in the world today. The companies that bear it are Microsoft Certified Partners, 


and when you encounter one, you encounter a professional proven to be the best at what they do. They have the most certified experts on 
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No Big Shifts Expected 
As IBM Switches CEOs 


| 


Palmisano to take 
reins from Gerstner 


BY LEE COPELAND 
AST WEEK’S  an- 
nouncement that 
Samuel J. Palmisano 
will take over as 
IBM’s CEO on 

March 1 culminates a long 

process in which he 

was groomed to re- 
place top executive 

Louis V. Gerstner. 

Palmisano, a 29- 
year IBM veteran 
who has spent his 
entire career at the 
company, had a big 
hand in setting its 
strategy while work- 
ing as president and 
chief operating officer for the 
past 16 months. As a result, an- 
alysts don’t expect him to make 
major changes in direction 
right away. 

Palmisano also ran several 
key business units before he 
was picked for the operations 


INCOMING IBM CEO 
Samuel Palmisano 


| 
| 
| 
| 


job, including IBM’s Enterprise | 
| leader who understands the 


Systems Group, its PC busi- 


Gerstner Credited With Turnaround =| 


When Louis V. Gerstner was hired as | technologies where it was previously 


IBM's CEO in 1993, the short-term 
objective he was given by its board 
of directors was simple, according to 
an internal memo he wrote last 
week: “Save the company.” 

Gerstner joined IBM in the midst 
of a deep crisis. The company was 
losing money and was thought to be 
in danger of going the way of many 
other once-dominant hardware ven- 
dors that missed the shift from pro- 
prietary mainframes and minicom- 
puters. Even the namesake IBM PC 
business was passing IBM by. 

But Gerstner gets credit for turn- 
ing the company around. IBM still 
isn't viewed by analysts as a high- 
growth company, but it has become 
competitive across a broad range of 


ness and its IT services unit. 
Palmisano has “certainly 
worn the right hats to lead 
IBM,” said David Mastrobat- 
tista, an analyst at Giga Infor- 
mation Group Inc. in Cam- 
bridge, Mass. “When you see 
someone as the group vice 
president of so many divisions 
at IBM, you know that doesn’t 
happen by accident.” 
And unlike when Gerstner 
was brought in to res- 
cue IBM nine years 


ago, Palmisano isn’t | 


taking over a strug- 
gling company. Al- 


though IBM reported | 


| 
| 


Samuel J. 
Palmisano 


Recent jobs held at IBM by 
| the company’s incoming CEO 
include the following: 


| SEPTEMBER 2000 TO THE 
PRESENT: President and chief 
operating officer 


OCTOBER 1999 TO SEPTEMBER 
| 2000: Senior vice president of the 
| Enterprise Systems Group, with respon- 
| sibility for servers and storage devices 





less-than-stellar re- | 


sults for last year’s | 


managed to do better 
financially than most 


fourth quarter, it has | 


| JANUARY 1998 TO OCTOBER 

| 1999: Senior vice president of IBM 
Global Services, the company’s IT 
services business 


other top technology | 


vendors during the current re- 
cession. 

“IBM is in a good position 
right 


dors, said Steve Josselyn, an 
analyst at Framingham, Mass.- 
based research firm IDC. He 


described Palmisano as a solid | 


an also-ran. 

Gerstner was also praised for sig- 
nificantly increasing IBM's focus on 
the lucrative IT services market, to 
the point where services revenue 
surpassed hardware sales during the 
second half of last year. 

“In the past, services was [an af- 
terthought] offering at IBM,” said 
Tom Bittman, an analyst at Gartner 
Inc. in Stamford, Conn. “Under Ger- 
stner, [IBM Global Services] would 
go out and sell their strategic capa- 
bilities and, by the way, sell hardware 
and software. And that's been great 
for the company.” 

Expressing a viewpoint shared by 
other analysts, Bittman described 
| Gerstner as a “buttoned-down and 








now,” especially com- | 
pared with other server ven- | 


| JANUARY 1993 TO AUGUST 1997: | 


| new market for the mainframe,” 


| AUGUST 1997 TO JANUARY 1998: 
| Senior vice president of the Personal 
Systems Group, which included IBM's 
PC and network computing units 


President of Integrated Systems So- 
| lutions Corp., an outsourcing sub- 
sidiary that’s now part of IBM Global 
Services 


intense” CEO who was exactly what 
IBM needed as it looked to cut costs 
and overhaul its internal structure. 
He also engineered acquisitions of 
vendors such as Lotus Development 
Corp. anid Tivoli Systems Inc. 

Gerstner came to IBM with no 
experience in the computing indus- 
try, having worked previously as CEO 
of RJR Nabisco Inc. and president of 
American Express Co. in New York. 
IBM said Gerstner will remain chair- 
man until the end of the year, and he 
will then be given a 10-year consult- 
ing contract. 

IBM last week also said that John 
M. Thompson, 59, will retire from his 
position as vice chairman effective 
Sept. 1. Thompson built up IBM's 
software group under Gerstner and 
is currently in charge of business and 
technology strategy 

- Lee Copeland 








hardware side of IBM’s busi- 


ness, which still runs neck- 


| and-neck with services for the 
largest share of the company’s | 


revenue. 


IBM’s fourth-quarter net in- HP/Compaq Deal Gets 
come dropped 13% year-to- | 
| enue dipped 11% to $22.8 bil- European OK rr 
lion. The company’s hardware | 
and services businesses were 


year to $2.3 billion, while rev- 


both down in the quarter, but 


| Gerstner blamed the decline in 
total revenue primarily on soft | 
| sales of PCs and the compo- 
|} nents that IBM sells to other | 
be in a position to increase prices” 
| because of the competition that 


vendors. 
In the past few years, IBM 


has become more of a competi- 
| tive force in several key mar- 


kets where it previously lagged, 


| such as Unix servers, storage 
| and nonmainframe databases. 
| The company has also signifi- 


cantly built up its services and 


software businesses, and it’s | 
| one of the leading advocates of 
| Linux technology for corpo- | 
| whether or not the Compaq acquisi- 
| tion goes through. The merged com- 


rate uses. 

Palmisano has been a strong 
proponent of using Linux to 
unify IBM’s 
lines. Users and analysts point- 
ed to the support for Linux 


various server 


as a factor in the uptick in | 


| Server Shipments Up 
' Slightly During 2001 


| port manager at Winnebago In- | 
dustries Inc. in Forest City, | 
| Iowa. “For any application that 


mainframe sales last year, the 
first since 1989. 
“Linux opened up a whole 


said Dave Ennen, technical sup- 


comes down the pipe, we'll 


| investigate if we can run it on 
| Lour] mainframe. That’s our 
| first option.” 
The CEO | 


changeover 
will take 


place on} 


| Short Takes 


Gerstner’s 
60th birth- 
day. That’s 
also the day 
his contract 
OUTGOING IBM 
CEO Louis Gerstner expires. 
Palmisano, 50, joined IBM as 
a salesman in 1973.) 
priorities be? How 


ick 
would you rate 


Gerstner’s tenure at IBM? Visit our online 
discussion forum. 
www.computerworld.com/q?a1550 


What should 
Palmisano’s top 





with IBM | 
| for bankruptcy protection in New 





Hewlett-Packard Co.’s planned ac- 
quisition of Compaq Computer Corp. 
cleared a big hurdle as the Euro- 
pean Commission gave its approval 
to the deal following an antitrust- 
related review. The commission said 
the combined company would “not 


exists in the IT industry. 


|... While HP Says 
More Cuts Are Likely 


HP said in a filing with the Securi- 
ties and Exchange Commission that 
it will likely make more cutbacks, 


pany would eliminate about 15,000 


| jobs for a 10% workforce cut, HP 
| said. But it added that reductions 


“would also be expected if the pro- 
posed merger is not completed.” 


Server vendors managed only a 
1.8% increase in worldwide unit 


shipments last year compared with 
| 2000 levels, the lowest growth rate 


since 1996, according to prelimi- 
nary numbers released by Gartner 
Inc.’s San Jose-based Dataquest 
unit. In the U.S., shipments dropped 
9.5%, from 1.9 million systems dur- 
ing 2000 to 1.7 million last year. 


Telecommunications carrier GLOB- 
AL CROSSING HOLDINGS LTD. filed 


York and Bermuda, where it’s 
based, and announced plans to sell 
ownership to new investors. . . . 
Peer-to-peer software vendor 


| GROOVE NETWORKS INC. in Bever- 


ly, Mass., named Chuck Teubner, 
formerly chief operating officer at 
USINTERNETWORKING INC. in An- 
napolis, Md., to a similar position. 








PATRICIA KEEFE 


Quantum Leap 


ILL GATES HAS SEEN the light and heard 
the alarms. As of his Jan. 15 state-of-the- 
union memo to employees, security, in 
the guise of “trustworthiness,” has finally 
zoomed to the top of Microsoft’s priori- 
ties. And Computerworld confirmed last week that 
the company has named Scott Charney, the former 
top cybercop for the Department of Justice, as its 


security czar. 

This about-face is mas- 
sively overdue at a com- 
pany whose products are 
the laughingstock of the 
security community, con- 
sidered too easy a target 
by experienced hackers 
and cause for much con- 
cern among uneasy cor- 
porations worried about 
their data assets. 

Data security managers 
are constantly confronted 
with Microsoft products 


that have built-in security screw-ups. | 


Vulnerabilities have been found in 
XP, UPnP, Internet Explorer, Out- 
look, Internet Information Server, 
Hotmail, Passport and, of course, 
every other version of Windows. 
Microsoft’s TechNet site alone lists 
60 security bulletins; since mid-Oc- 
tober, four out of nine have been 
tagged “critical.” 

Both Gartner Inc. and the FBI’s 
National Infrastructure Protection 
Center have publicly warned users 
away from specific Microsoft prod- 
ucts or features. And now a coalition 
of consumer and privacy groups is 
asking the Federal Trade Commis- 
sion to step in. 

Yet Gates thinks Microsoft can 
“lead the industry to a whole new 
level of trustworthiness in comput- 
ing.” In our lifetime? Seriously, 
reaching that lofty goal will require a 
quantum leap in the security of Mi- 
crosoft’s products, in its ability to 
work with competitors and in re- 
gaining the trust of now-angry users. 
That won’t happen overnight. 

For one thing, Alan Paller, director 


PATRICIA KEEFE is editorial 
director at Computer- } 
world. You can contact i 


her at patricia_keefe@ 


of research at the SANS 
Institute, said Microsoft 
told him that its new de- 
votion to security testing 
and training will primari- 
ly benefit its new prod- 
ucts. Although that bodes 
well for the future, it’s of 


no help to the tens of mil- | 


lions of Microsoft users 
who are now running the 
company’s vulnerable ap- 
plications on equally at- 
risk operating systems. 
This is why it matters when a com- 


| pany assumes a monopoly position 


in a market: It doesn’t have to care 


| about current users. Who ya gonna 


| call for replacement desktop applica- 


| tions? For most commercial and gov- 
| ernment accounts, there are no ac- 





ceptable alternatives to Microsoft. 


"WE HAVE A DILEMMA. THERE ARE 
WEBSITE , BUT THEY ‘RE BUYING A LOT OF STUFF. ” 





Paller and many users in various 
forums all insist that Microsoft’s cus- 
tomers are disillusioned, angry and 
starting to act. Paller recounts how 
the deputy CIO of the Air Force 
stood up at a recent SANS seminar 


| and told 200 people that Microsoft 


must make a quantum change in the 
way it delivers software to the gov- 


| ernment. He’s quoted as saying, “It’s 
| costing us more to clean up after the 
| messes than to buy the software in 


the first place, and we're willing to 

pay for it [to be done right].” 
Charney needs to calm Microsoft’s 

frustrated users, who don’t want to 


hear from him about what happens 


after a security breach. They want to 
know what Microsoft is doing to pre- 
vent security problems. And they 
want help with the problems they’ve 
got now. 

However Microsoft puts Gates’ 
directive into action, it has to ad- 
dress existing weaknesses. A good 
place for the company to start is “Re- 
sults, Not Resolutions: A Guide to 
Judging Microsoft’s Security Prog- 
ress” (www.securityfocus.com/news/ 
315), by security experts Bruce 
Schneier and Adam Shostack. It’s 


Microsoft can begin to secure its 


| products and gain our trust. D 


HACKERS ON OUR 
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PIMM FOX 


Little Hope in 


Web Services 


FUNNY THING hap- 

pened on the way to 

Web services: Some- 
one forgot to mention that the 
XML protocols for SOAP and 


Web Services Description Language 
(WSDL) haven't been agreed to yet. 

In fact, the standards body for Web 
services released a draft for a Web ser- 
vices container 


| for J2EE only last 


month. And 
while there are 
positive things 
about SOAP and 
WSDL (such as 
message-passing 
between XML 
schemas), there’s 
a great deal to be 
worked out re- 
garding XML 
protocols for 
user interfaces and testing of Web ser- 
vices with back-end applications. 

For example, in a Web services envi- 
ronment, an HTML Web page that in- 
cludes a Java Server Page, such as a live 
stock ticker, must connect to a back- 
end application to retrieve data. If you 
wanted to test this connection before 


PIMM FOX is Computer- 
world's West Coast 
bureau chief. Contact 
him at pimm_fox@ 
computerworld.com. 


| deployment, you would need virtual- 


; , : s | ization technology from Interwoven 
brimming with suggestions on where 


Inc. But it’s not a standard, either. 

So far, Web services lack a single 
comprehensive way to manage their 
development, testing, deployment and 
upgrading. 

IBM has chosen to tackle the issue 
piecemeal, defining standards on the 
business stack as needed, using Web- 
Sphere and Web application manage- 
ment tools. 

Both IBM’s and Interwoven’s ap- 
proaches leave a large hole to be filled 
for Web services management. 

If you think portals are the solution, 
think again. Can you imagine exposing 
back-end applications to people enter- 
ing data from a portal? Never mind se- 


| curity issues; you still need to organize 


and synchronize information between 
two different applications. And you can 
bet those applications are built with 


er 
US 
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different vendor technology, bringing 
additional integration headaches. 

Testing isn’t just a technology prob- 
lem; it’s also an issue of reliability. A 
large enterprise can’t jump into Web 
services without some assurance the 
back-end connections via XML and 
SOAP actually work. 

Finally, few companies have struc- 
tured their information repositories 
with Web services in mind. Document 
management, Web content manage- 
ment, digital asset management, media 
asset management and Web applica- 
tion management, as well as file sys- 
tems for unstructured content, are all 
potential bottlenecks to rolling out 
Web services. Even if you lick the con- 
tent management problem, you still 
face testing source databases for the 
transformation of tables to Web pages. 

Some IT managers think Web ser- 
vices are a reality — they aren’t. Some 
believe Web services mean interoper- 
ability — they don’t. (.Net and j2EE are 
still slugging it out in the hearts and 
minds of developers.) Others see Web 
services as APIs — they aren't. Let’s 
face it, you won’t run subroutines, 
functions or class calls over the Net. 
And you're unlikely to be starting any 
Web services projects before these 
gaps in Web services are closed. D 


THORNTON MAY 


Is It lime 


To Upgrade 
Vendor CEOs? 


UDY GIULIANI has it. 

Lincoln, FDR and 

Churchill had it. And 
Jeff Immelt, Jack Welch’s suc- 
cessor at General Electric, has 
it: the ability to lead in difficult times. 

The technology world is facing diffi- 
cult times. Many in-the-trenches IT 
leaders are standing at a Dunkirk-like 
decision point: Do they retreat strate- 
gically, stand their ground in the face 
of a certain rout, or just surrender to 
the forces of darkness and despair? 
They wonder if vendor CEOs will 
come to their rescue by providing in- 
centives to buy their products in a 
down economy. Observers of the 
broader tech scene wonder if the cur- 
rent slate of vendor CEOs is up to the 
challenge of leading in this economic 
climate. 
So, is it time for a vendor CEO up- 


NEWSO) 


grade? Has the current cast 


| of technology CEOs out- 


lived its usefulness? Are 
these CEOs so grounded in 
times-are-good mind-sets 


| that they can’t be effective 


during an economic down- 
turn? 

In the “Managing the In- 
formation Resource” pro- 
gram at UCLA, in which 
most of the students are 
CIOs or their direct reports, 
professors ask students to 
describe the state of today’s 
technology leadership. One 
European student responded, only par- 
tially tongue in cheek, that true Ameri- 
can vendor CEO leaders are like 
snakes in Ireland: There are none. 

Another set of students asked, Should 
the likenesses of Carly Fiorina, Bill 
Gates, Scott McNealy, Lou Gerstner and 
Larry Ellison be chiseled into a technol- 
ogy Mount Rushmore? Or should they 
be voted off the technology leadership 
island? (Answer: Only Gates goes.) 

The current cast of technology 


THORNTON May is a Se- 
nior member of Toffier 
Associates Inc. in 
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| and try to save the ship he’s steering? 


| 
| 
| 


| 


CEOs enjoyed a great ride. 
They were very successful 
during the boom times of 
the PC/client-server/net- 
work computing/Internet 
build-out. It remains to be 
seen how they will do in 
the you-have-to-do-more- 
than-ship-and-shout scene 
that describes today’s IT 
marketplace. 

The real question is, 
What should we ask of ven- 
dor CEOs in these difficult 
times? Is it enough for one 
of them to hunker down 


Or should we expect more in the way 
of technology statesmanship, looking 
beyond a company’s interests to the 
overall good of technology? We have 
entered a new digital world, one that 
needs new frameworks and heroes. 
Who will these leaders be? 

How should we evaluate technology 
CEOs? We need to jettison dysfunc- 
tional and misleading indicators such 
as stock-price multiples and quarterly 


23 


sales figures. What should the score- 


| card for the next generation of tech- 
| nology CEOs look like? 


What are good metrics of leadership 
today? One possible evaluation point is 
sincerity and motives. Do CEOs care 
about their customers, or do they just 


want their money? 


Instead listening to CEOs’ publicist- 


| sculpted sound bites, we need to look 
| beyond the words that come from their 


lips. Seek the meaning in the whole 
context in which a message occurs. To 
figure out what’s really being said, we 
must ask, Who is saying what to whom, 


| under what conditions and circum- 


stances, and with what intent? Gates, 


| for example, showed commendable 


| leadership recently when he announced 
that Microsoft would undertake the 
quest to write more secure code. 

In 1953, Charles Wilson, then presi- 
dent of GM, told a congressional hear- 
ing that “what was good for our coun- 
try was good for General Motors.” Giv- 
en the dependence of our economy on 





IT, is the current group of vendor 
| CEOs good enough for the country? DB 





Taking Wrong Approach 


NTERESTING — the IT 
industry is making the 
same mistake at the na- 
tional level that we often 
make at the company level 
{“CEOs: Broadband Is Na- 
tional Priority,” News, Jan. 
28]. Instead of tech leaders 
pushing broadband to Con- 
gress, they should convince 
manufacturing, retail, bank- 
ing and other leaders of its 
necessity, then enlist their 
aid in lobbying. 
Barry Blauer 
Technical manager 
TEKsystems 
Southfield, Mich 


Another Buzzword 


WONDER HOW many 


times in the past 10 years | 


this story has been pub- 
lished with only the name 
(buzzword) for the technol- 
ogy and the names of the 
suppliers and users changed 
[“Web Services Projects 
Pose Challenges for IT Man- 
agers,” News, Jan. 28]? I 
guess I’m getting too jaded, 
but my question is, Why 


would anyone with any ex- 


perience in IT be surprised 
at the situation described? 


| Charlie Whitfield 


Manager, IS 


| Sault Ste. Marie, Ontario 


You Cal This Progress? 


IMM FOX describes the 
modern look, all right 
(“The Modern Profile 


| of the IT Pro,” News Opin- 
; ion, Jan. 21). But what a 
| waste. Older, seasoned vet- 


erans of the IT industry who 


| understand the difference 


between what is new and 
what simply has a new name 


| don’t stand a chance. Think 


of that the next time some- 


| thing doesn’t work correctly. 
| Deatra Davenport 
| Independent consultant 


MicroComp 
Chicago 


-Oit-fashioned Security 


OW-COST IRISH airline 

Ryanair does positive 

passenger bag match- 
ing with nothing more com- 
plex than pencil and paper 
(“Wireless LANs: Trouble in 








the Air,” Page One, Jan. 14}. It 
can do this because it won’t 
accept or pass on baggage 
from other carriers and 
doesn’t facilitate transfers 
between flights. This dem- 
onstrates that technology is- 
n’t always the answer, even 
though it does keep us com- 
puter professionals in a job. 


| Miles Thomas 
| Harpenden, England 


milest@orange.net 


F MY BAG somehow goes 

where I don’t, will the 

airlines be able to put it 
on an airplane to return it, 
or will the luggage be forev- 
er grounded? Perhaps the 
airlines will offer free tickets 
to owners of misdirected 


luggage to join their bags. I'd | 


be hoping my bag went to 
Tahiti by mistake. 

John Taylor 

Vallejo, Calif. 


The Root of the Problem 


AGREE THAT Windows 

9x and ME don’t have 

system protection [“Pe- 
treley’s Law of Sysadmins,” 
Knowledge Center, Jan. 21]. 


| They were designed that 

| way. If you want system pro- 

| tection, don’t use them. 
Windows NT, 2000 and XP 
ali have system protection. I 
haven’t seen the latest fig- 
ures, but that’s a large per- 
centage of Windows PCs. 

| It’s true that users may log 
in as administrator, but 
that’s also true of all Unix 
systems, and I suspect that 
more Linux users log in as 
root than on all other Unix 
systems combined. 

| Phil Daley 

| Hillsboro, N.H. 
p_daley@conknet.com 
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The 2002 Challenge 


Addressing Interoperability in 
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Interoperability: 
The 2002 Challenge 


Addressing Interoperability in 
Heterogeneous Environments 


nteroperability has been a hot topic of discussion 


and debate since the initial emergence of stor 


age-area networks (SANs). Is it still an issue? 


Should interoperability concerns be perceived as 


a key barrier to successful SAN deployment? 


Current analysis says definitely no... with a little bit of yes 


The early days of SANs were 
remarkably like the early days of 
LANs: The market was flooded by a 
plethora of products and vendors, 
hardware and software, hubs and 

switches, with a 


mind-boggling 


rrr 
StU features and func 
Ganai@mm tions. And like 
ene LANs, early SANs 


had tremendous 


array of different 


interoperability 
issues. With products coming to mar 
ket before standards, and hundreds of 
vendors jumping on the SANdwagon 
it was a daunting task for users to dig 
through the hype, understand what 


1, and find products that 


actually talked to each other 

The result was that early SAN 
adopters put in a great deal of tin 
and effort to get their SANs working. 
Interoperability was perhaps the 
number one issue for these 
users. Only the brave dared to tackle 
the task, with lots of vendor involve 
ment and frustration. The sentiment 
of the adopters was that build 
ing your own SAN and trying to piece 
things together from various vendor 


was extremely difficult. Their advice 


find a primary vendor (probably your 


storage vendor, your server vendor, or 
a trustworthy integrator) and stick 
with a homogeneous proven configu 
ration 


These early struggles took a toll. Ln 


fact, in a recent survey of users at 
Storage Networking World, » of 
audience members reported that 
incompatibilities between vendors 
and their products have had a nega 
r businesses (see 


tive impact ont 


Figure 1) 


Progress on standards 

In the past several years, standard 
began to emerge, vendors began to 
work together, and we began to see 
products with an initial level of inter 
operability. Numerous organizations 
undertook significant roles: the 
Networking Industry 

(SNIA); the Fibre 
Industry 
(FCIA); the Fibre 


Storage 

Association 
Association 

Alliance; t 


National Committee for Information 
a a 
Early adopters found that 
building your own SAN with 
pieces from various vendors 
was extremely difficult. 
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to be getting the de facto standard for data 
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The issue of standards 
tends to be one of the 
banes of the technology 


industry. Vendors constantly 


fight one another for their 
own vested interests, and 
the inevitable result for 
users is frustratingly 
slow progress. 


Technology Standards (NCITS, for 
merly X3) technical committees (T10 
for SCSI, and Tl for Fibre Channel 
working toward ANSI standards); 
and the Institute of Electrical and 
Electronics Engineers (IEEE), among 
others 

The issue of standards tends to be 
one of the banes of our industry; ven 
dors fight for their own vested inter 
ests, and the result is slow progress. A 
quotation on the T10 Technical 
Committee’s Web site says, “If com 
puters get too powerful, we can 
organize them into a committee; that 
will do them in.” In the case of SANs 
however, much standards-related 
progress has been made, and the cur 
rent level of SAN interoperability 
owes much of its progress to this 


work 


Labs and certifications 
Another key reason for interoper 
ability improvement is the amount of 


time, money, and effort that has been 


put into a variety of interoperability 
laboratories. With over 200 vendors 
in the networked storage space and 
the huge number of product combi 
nations, vendors face an almost 
impossible testing challenge. Many 
major players have spent millions of 
dollars building test labs with prod 
ucts representing at least the most 
popular options for servers, storage 
arrays, tape libraries, hubs, switches 


and bridges. These labs serve the ven 


age 


dors as internal test facilities for tl 


own product groups, and as a proof 


of-concept lab for specific customer 
I 


requirements 

In addition to vendor labs, SNIA 
(in conjunction with Compaq 
Computer Corp.) has 
SNIA Technology Center. 
pendent interoperability test 
Colorado Springs, for its m 
companies vendors and 


alike. Advisors to the center include 


Figure 1: 


analysts, integrators, and end users 


The lab is a resource for the SNIA 
Interoperability Committee and is 
also intended to provide ongoing 
plug-fests, workshops, and training 
Industry conferences such as Storage 
Networking World let users see the 
progress being made by visiting tl 
Interoperability Lab onsite at 
show. In a survey at the Oct. 200! 
Storage Networking Worlc » of 
attendees said the lab was a valuab 
part of the overall education at 
show 

The University of New Hampshire 
offers another vendor-neutral inter 
operability resource through its 
InterOperability Lab, known as IOI 
The mission of the IOL is twofold 

@ The first mission, externally 
focused, is to provide testing services 

rs to verify the interoper 

ibility and/or conformance of their 


products 


Have incompatibilities between competing vendors’ products 
had a negative impact on your business? 


Source: A survey of attendees at the Oct. 2001 Storage Networking World conference 
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@ The second mission is to pro 
vide educational and employment 
opportunities for qualified University 
of New Hampshire students 

The IOL includes focused interest 

, called consortiums, in Fibre 
Channel, Gigabit Ethernet, iSCSI, IP 
v6, and several other communications 
protocols 

Independent certifications on 
compliance and interoperability have 
also helped users understand what 
works with what. The Fibre Channel 
Industry Alliance (FCIA) SANmark 
certification was the first stamp of 
approval offered, certifying a level of 
Fibre Channel compliance on indi 


vidual products 


New forums 

wre recently, SNIA introduced a 
new forum called the Supported 
Solutions Forum (SSF) with two key 
goals. First, the aims to build a 
registry of tested multivendor solu 
tions that meet a defined set of crite 
ria (such as including a minimum 
number of competitive vendor prod 
ucts, as well as functional and test cri 
teria). 

The initial SSF announcement 
included two approved solutions 
with six vendors; however, these 
solutions were approved with fairly 
severe restrictions (for examp 
ing to maintain separation between 
competitive boxes). Some critics 
have asked whether this qualifies as 
real interoperability, but at the very 
least, it’s certainly a step in the right 
direction 

Membership in SSF is up to 36 
vendors, and new supported solu 


tions are purportedly in the works 
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Users should hope the forum will 
now address tougher issues, includ 
9 yer and more complex con 
urations, additional vendors, soft 
ware, tape, switch interoperability 

and so on 
The second goal of the SSF is to 


address what is perhaps the bigger 


e key reason for 


interoperability improvement 


is the time, money, and 
effort that's been put into 
interoperability labs. 


issue today in interoperability: coop 
eration among vendors in supporting 
multi-vendor storage networks. As an 
independent organization, SSF aims 
to help vendors work together to help 
users with their ongoing support 
issues assisting with cooperative 
support agreements, and by striving 


to establish a cooperative support 


community 

Where does all this leave us today? 
On the standards front, some say 
there are now too many; others argue 
that there is still a broad lack of agree 
ment. Work continues, and while ini 
tial standards are now in place, there 
is still work being done to resolve 
more advanced _ interoperability 
issues (for example, FC-SW _ is 
approved and defines the standards 
for Fibre Channel Switches, while 
FC-SW2 is now in the approval 
process for defining the standards for 
interoperability between Fibre 


Switches) 


Taking root 
course, once any standard is 

finalized, it takes time for it to be 
implemen In terms of availa 
products, interoperability testing has 
made great strides, and most lower 
layer interoperability issues have 
been addressed (notable exceptions 
include ongoing conflicts and incom 
patibilities in the HBA arena) 

There’s been enough progress to 
date so that the general issue of inter 


operability and lack of standards has 


A 
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Should the industry provide vendor-independent 
certification in storage management technologies? 


Yes 
N\ 


No 


Source: A survey of attendees at the Oct. 2001 Storage Networking World conference 


dropped significantly from its place 
near the top of the list of SAN imple 
mentation barriers, according to most 
users. (Cost and a lack of skilled 
workers now top the list of impedi 


ments, Many users agree. ) 


Moving up the stack 

With interoperability issues at the 
lower layers now being largely 
addressed, the key challenge in true 
interoperability is in moving up the 
stack to address issues such as stor 
age management. Again, standards 
work comes into play here. At the 
IETF, efforts are under way in SNMP 
MIB compliance. Also, work on the 
Common Information Model (CIM) 
is being done at the Distributed 
Management Task Force (DMTF) 
Because one of the key drivers for 
SANs is improved storage manage 
ment, interoperability at the manage 


ment level is critical. Underscoring 


this need, 81% of Storage Networking 
World attendees said they want 
industry to prov vendor- inde 
pendent certification in storage man 
agement technologies (see Figure 2) 

Another example of moving up the 
stack comes in the area of virtualiza 
tion. Virtualization offers great bene 
fits today within individual areas, but 
until SANs offer complete v irtualiza 
tion regardless of product, vendor 
and platform, the full promise is not 
fulfilled. Moving up the stack to these 
higher levels of interoperability 
involves more complexity, but will 
truly deliver on the promise of net 


worked storage 


Emerging technologies 

Thus far, the SAN limelight and 
the interoperability discussion have 
focused mostly on Fibre Channel. In 
fact, some attribute the continuing 


negative focus on interoperability to 


Fibre Channel critics who seek to dis 
credit Fibre Channel SANs 

If, as many believe, lower layer 
interoperability is no longer an issue 
with Fibre Channel, one interesting 
question is what will happen in the 
future with the emerging technolo 
gies of iSCSI, iFCP, FCIP, Infiniband 
DAFS, TCP offload, the merging of 
SAN and NAS, z 


gies as they evolve. For example, 


other technolo 


while some argue that IP storage has 
already conquered interoperability 
since it uses IP, there are still many 
challenges to address with IP storage, 
as well as its coexistence with Fibre 
Channel 

As with most changing technolo 
gies, the real world will most likely be 
a hybrid of all these options, involving 
interoperability issues within tech 
nologies as well as across them. And 


so the saga continues.. 
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Brian Cobb is vice president of 
systems engineering at Fannie Mae, 
the largest provider of funds for home 
mortgages in the U.S. and one of the 
largest financial services corpora 
tions in the world. His organization 
is responsible for the engineering and 
support of all Fannie Mae system 
platforms — a large, heterogeneous 
environment spanning the agency's 
two primary data centers in the met 
ropolitan Washington, D.C., area 

Before joining Fannie Mae in 
2000, Cobb was director of informa 
tion technology at  Primark’s 
Financial Information Division in 
Bethesda, Md., and director of infor 
mation and technology services at 
Hagler Bailly Inc. in Arlington, Va 
During a recent conversation, he dis 
cussed the most important interoper 
ability issues facing Fannie Mae and 
other users. 

Describe your storage network 
ing infrastructure at Fannie Mae. 

COBB: We use storage-area net 
working in a couple of areas. We have 
a SAN in place to support our backup 
and restore activities. So we have a 
fabric which connects the backup 
media servers. Smaller systems send 
their data over a Gigabit Ethernet 
network to these media servers on 
the SAN, and they in turn send the 


data to our tape drives. 
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Inching Toward Interoperability 


Fannie Mae's Brian Cobb says enterprises are moving 
toward true heterogeneous storage networks —- 
but vendors and users alike should do more 


We have some big tape silos that 
the media servers write to. This is 
how we back up our small servers 
Our large systems what we call 
SAN class — 


base servers and file servers. If they're 


] 


include our big data 


over a certain size, they are consid 
ered SAN class, and we tie those 
directly into the fabric and write 
directly over Fibre Channel to the 
tape silos. 

How has this infrastructure 
been changing during your time at 
Fannie Mae, and how do you 
expect it to change in the future? 

COBB: We went into production 
this year, so we're basically convert 
ing systems over to this now. We 
started in our data warehouse envi 
ronment with the backup SAN, and 
more changes will come as W 
migrate other systems from our 
vious backup architecture to 
new one. So I expect the changes for 
the next year or two to be related to 
growth. The core-edge architecture 
we selected for our SAN fabric infra 
structure allows us to scale up by 
adding pairs of switches, and that is 
what we will do. 

All hype aside, what is the cur 
rent state of storage networking 
interoperability? 

COBB: Interoperability is pretty 


good in terms of basic functionality 
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But when you talk about more 
advanced things like SAN manage 
ment tools and virtualization, | think 

are still out there fin the future] 


You won't find a SAN management 
tool today that can really manage a 
large heterogeneous environment — 
that can handle many multiple types 
of servers and mixed-vendor storage 
all in the same fabric. And virtual 
tion is a layer beyond that. 

But in terms of interoperability 
with the basic stuff, meaning having 
disk drives and storage arrays talk to 
a fabric, w talks to s on the 
other side, that capability is generally 
there. In the case of our backup SAN 
we had a problem with a high-end 
Unix platform. In order to fix it, 
we've been working through some 
interoperability issues around HBA 
drivers and SAN-switch firmware 
revisions. But we worked with the 
vendors, and we have a working solu 
tion. 

fow troubled are you by the 
gap between the basic interoper 
ability that works, and the virtual 
ization that is not reality? 

COBB: I'm actually not yet trou 
bled b | think the migration to 
some of these bleeding-edge tech 
nologies like virtualization will be 
slow as customers check them out, 


see the work, and [come to] v 
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about them. Fan 
Mae is not bleeding -edge; we're risk 
averse. We're more into using proven 
technologies, so we wouldn't adopt 
anything like virtualization until we 
saw that it was mature. 

There seems to be a dichotomy 
between what we hear from ven 
dors and what users are really 
doing. Vendors talk about the abili 
ty to make hetero ous net 
works, while a lot of users say 
they’re just trying to keep this 
thing uniform and homogeneous. 
Where is the reality between those 
extremes? 

OBB: I think it’s in the middle 
As | said, we have a SAN for the 
backup capability. And in that envi 
ronment, we are heterogeneous, mix 
ing all kinds of systems. On the disk 
storage side, we develop our disk 
SANs by business area. In those cases 
we may heterogeneous on the 
server side, but we're not mixing dif 
ferent vendors’ storage yet. So I think 
both things are happening 

Truly, we are moving toward 
being fully heterogeneous on the 
storage side. A lot of the [vendor] 
companies we deal with are getting 
the message. As a result, we periodi 
cally hear about vendors teaming up 
to work on open standards issues 

When you talk to your peers, 
other users, what are their com 
plaints about interoperability? 

COBB: The point that you raised 
There’s a difference between users 
who've done it and users who haven't 
When we started out, we went 
around and we talked to everybody 
We went to all the vendors, we went 


to their interoperability labs, and we 
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went to their engineering headquar 
ters and talked to their designers. We 
were told that if we were going to 
build it, we should definitely be 
homogeneous 

There is still a lot of push like that 
from the sales side. In our environ 
ment, we're very large, heteroge 
neous, and complex. Homogeneous 
ust doesn’t work for us because 


that’s not how we are, so we have to 


wade through all that hype and get 
down to really what it can do 
Customers who haven't imp 
mented yet may be shying away from 
some of the rhetoric that they hear 
But other customers who have dc 
implementations agree that, as has 
been the case with Fannie Mae, you 
have to build test environments every 
time you deploy. We have a test envi 


ronment that we can test everything 
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on, including functionality, throug 
put, and configurations. 

We make sure we can change 
switch firmware as we need to. Wi 
have the same kinds of servers in the 
test environment, including HBA 
firmware, and the same on the stor 
age side. Customers have to be will 
ing to do this testing in a full environ 
ment that mimics productic 

How would you assess the 
progress by vendors toward inter- 


operability, and how can they do 


more? 
COBB: They 


They should be more aggressive 


should do more 


Vendors partner up and make these 
announcements about working 
together, but I'd like to see more hard, 
cold interoperability certifications 
out there. I'd like to see multiple stor 
age vendors com ig out and certify 
ing solutions all together 

Do you view things like the 
Storz Networking Industry 


Association's Supported Solutions 
Forum as a step in the right direc- 
tion, but not a big enough step? 

COBB: | think it is a step in the 
right direction. We need that, and we 
need big customers forcing the issue 
Some of the conferences like Storage 
Networking World are helpful, but 
sometimes | think that big customer 
alliances might also be a big help 

Users stand to benefit most 
from standards, but it’s often hard 
to get them involved. Have you had 
any involvement in the standards 
development process? 

COBB: | haven't been involved in 
the development of standards, but | 
have been considering it. I think I 


could make a difference if I did. The 





vendors | work with have been 
responsive — some more than others 
— and so far, we've been able to get 
our issues re at Fannie Mae 
But I do think participation on stan 
dards boards would be beneficial 

It’s hard to get users involved, 
because they’re off taking care of their 
day activities. But on the flip 
side, we've clearly seen the gains this 
technology has provided in terms of 
helping us reduce our costs and 
increase our efficiency. That’s why 
from my standpoint, it’s worth get 
ting involved with some of these 
standards 

It sounds as though you believe 
substantial interoperability gains 
have been realized. 

COBB: As I said, the basic stuff is 
there. SCSI over Fibre Channel, all 
that good stuff works today, so I can 
use switches now and build SANs 
that allow me to share storage on the 
back end across multiple servers 
That \ rks today, there is no doubt 
about it. | think that switch technol 
ogy has matured so that there’s a long 
mean time between failure. The man 
agement side is where there is a lack 
of standards 
all talk 


same language, so I don’t have a 


Your storage arrays dc 


tool that I can use to look at and 
administer heterogeneous storage 
arrays all at the same time. Those 


types of things are not there 


Reporting is another area where | 


don't have a tool that can give me 
reporting across all environments on 
for example, utilization. 

We seem to go through cycles. 
Twenty years ago, we went through 
this with LANs, and with data and 
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voice communications integration. 
At the time, it seemed like we were 
in the dark old days of computing 
Now it seems like we're going 
through that again as we strive to 
reach some kind of standardized 
level of interoperability. It’s almost 
as though in some ways, we haven't 
moved ahead at all. 

COBB: Take networks, for exam 
ple. And this came up in a lot of our 
conversations with server and stor 
age vendors. Most LANs don’t 


include a mix of switches and 


routers. People who build LANs 
their switches and routers from the 


> 


same vendor. So even though TCP/Ik 


and Ethernet mature standards 
you still end up building a homoge 
neous network infrastructure. At any 
rate, cle perability is 
improving 

How satisfied are you by the 
role being played by SNIA, and 
how much bigger can that role be 

COBB: Besides driving standards 


| would like them to go out an 
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more customers involved. They 
should bring them together separate- 
ly, and also get them involved in stan 

dards development, because cus 

tomers are the ones the vendors have 
to ultimately please. 

i think SNIA feels sheepish that 
they haven't done that, but I t 
they also feel as though it’s very 
hard to get users to participate 
because as you said, they have their 
regular jobs — and the standards 
process is so slow. 

COBB: From my own perspective, 
| think it’s valuable for users to get 
involved. The more user involvement 
we have, the more things we'll get. 

What advice do you have for 
users who are implementing stor- 
age networks? 

YBB: Do your research. Talk to 
ul the vendors. Go to their labs. See 
what they're doing, In the case of a 
large, heterogeneous environment 
like we have, we opted to go with an 
integrator to help us build a fabric 
They also helped us to get all the 
server and storage vendors on the 
same Ppa e 

We use a company na CNT, 
Computer Network Technology. We 
do data replication in our mainframe 
environment using some of their 
products, so CNT’s already in the 
storage networking business with us, 
but they don’t care about a particular 
server or storage option. 

They just like to do the integra 
tion piece, so we turned to them and 
said, “H 
we brought them on-board to help us 


we want to do this,” and 


come up with the architecture and 
the right way to build our SAN infra 


structure. 
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Wired for Success 


Hitachi storage system provides instant ROI 
for Focal Communications 


Focal Communications Corp 
needed a storage system that would 
offer the company 24/7 availability, 
ease of management, and the ability 
to scale as its data grows. As a 
national phone company, Chicago 
based Focal needs to support a vast 
amount of reporting for its corpo 
rate clients. This means keeping 
track millions of customer 
records, a job that would cause pro 
nounced infrastructure 
problems if left unad 
dressed 

As senior manager of 
Focal’s data center in 
Arlington Heights, IIL, 
Philip 


enced first-hand how the 


Brown experi 


company’s storage 1n 


trol. With more customers expect 
ing instantaneous access to billing 
information and service records, 
storage bottlenecks became increas 
ingly common — and storage man 
agement ever more challenging 
When Brown began his search 
for a solution, Focal had approxi 
mately 100 Windows and Sun 
Solaris servers, many using direct 
1 storage (DAS). That meant 
ints of administration, 100 
points of power, and 100 points of 


connectivity had to be managed 


Case 
Study 


structure was growing out of con 


“We were able to look across our 
environment and see up to 300GB of 
available storage,” Brown says. “The 
problem was, we couldn't utilize 
that storage beyond 30GB because it 
was so dispersed and fragmented 
across servers.” 

And Focal’s rapid growth pro 
ised to exacerbate these woes 
Brown considered continuing the 
company’s DAS approach, but this 
would impose greater 
congestion problems, 
and would do nothing to 
alleviate repeated storage 
hardware costs. With all 
internal avenues 
exhausted, Focal recog 
nized it needed an ente 


prise storage solut ion 


The assessment 


Before making a decision, Brown 
worked with outside consultants 
and created a matrix of top storage 
vendors. He wanted Hitachi Data 
Systems included in assessment 
because of Hitachi's reputation as a 
quality player in the storage arena 
When they compared providers side 
by side, Brown and a team of Focal 
system administrators focused on 
criteria such as manageability, scala 
bility, performance, professional 


services, and cost 
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After reviewing Focal’s storage 
requirements, Brown determined 
that only a very highly available stor 
age solution — one that would scale 
seamlessly in both performance and 
capacity — could be trusted with 
the company’s most critical data. In 
addition, the solution had to accom 
modate 8TB of existing storage 

“That’s when we decided on the 
Hitachi Lightning 9960,” Brown 
says. Hitachi's revolutionary Hi-Star 
switch actually prevents bottle 
necks and disruption in service by 
offering 64 internal paths; if one 
fails, 63 working paths remain. This 
impressed Brown's team 

Moreover, the Lightning 9960 
didn't just eliminate bottlenecks and 
scale to meet increased demand; it 
delivered peace of mind by way of 
Hi-Track remote monitoring. Hi 
Track’s call-home feature ensures 
non-disruptive service by detecting 
and addressing potential system 
problems before they occur 

In the end, Brown and his team 
were most impressed by the features 
and benefits of the Lightning 9960 
Besides offering high availability and 
scalability, the Lightning 9960 deliv 
ers built-in redundancy, leading 
software, and storage-area network 
(SAN) capability. Brown was also 


reassured to learn that Hitachi Data 
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Chicago-based Focal 
needs to support a vast 
amount of reporting for 
its corporate clients. 
This means keeping 
track of millions of 
customer records, a 
job that would certainly 
cause pronounced 
infrastructure problems 
if left unaddressed. 


Systems maintains close technical 
alliances with leading storage man 
agement software providers like 
Veritas 

At this point, Brown decided not 
only to select the Lightning 9960, 
but to pursue a long-term relation 


ship with Hitachi Data Systems 


Foresight 


IT managers are under increasing 


pressure to choose the best storage 
solution for their business. Focal 
Communications is absolutely con 
vinced it made the right choice 
Brown compared the costs of pur 
chasing 2TB of additional storage for 
the Lightning 9960 storage system 
and purchasing a similarly equipped 
array from another vendor. The 
result: the Lightning 9960 saved 
Focal $160,000. “It was a better 


designed machine and saved us 
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money with our first additional stor 
age purchase,” Brown says 

The growing national communi 
cations provider also discovered 
that based on its current configura 
tion of the Lightning 9960, Focal 
could maximize the number of stor 
age frames on the Lightning 9960 
and realize TB storage capacity 
“We wanted to come up with a stor 

solution that would scale to 
meet our needs,” Brown says. “The 
Lightning 9960 easily met that 
need.’ 

With the implementation of the 
Lightning 9960, Focal no longer 
worries that its storage infrastruc 
ture lacks the capability to scale as 
its quantity of data grows. The com 
pany has since added billing, 
account information, and data ware 
housing and provisioning data to its 
Lightning 9960 solution. With plans 
to connect more production servers, 
Focal has already added another 2TB 
of capacity and plans to add more 
storage in the near future. Not bad 
for a company that had 
built its first 8TB of DAS 
on Sun and Compaq plat 
forms. “We now have a 
lot of confidence in 
Hitachi Data Systems and 
the Lightning 9960,” 

Brown says. “Fourteen 

months after our Hitachi storage 
decision, Sun identified the 
Lightning 9960 as their enterprise 
storage solution of choice. I think we 


showed some good foresight.” 


artner for the futur 


Named one of the nation’s fastest 


growing technology companies by 


Computerworld C hing / INTEROPERABILITY: THE 2002 CHALLENGE 


Bloomberg Personal Finance, Focal 
Communications’ future plans 
include leveraging the SAN connec 
tivity of the Lightning 9960 to fur 
ther boost return on investment. 
The company also plans to imple 
ment an enterprise backup solution 
that will employ Brocade Silkworm 
2800 switches and a StorageTek 
L700 Tape Library 
These switches will allow the 
communications provider to take 
data from the Lightning 9960 and 
copy to tape using Veritas 
NetBackup over Fibre Chann 
Another money-saving proposition. 
“Rather than maintaining an inde 
pendent tape and storage solution 
for the UNIX side and the Windows 
both will use our new enter 
prise backup solution,” explains 
Brown. For added assurance, Focal 
is also preparing to mirror its stor 
age solution at a remote data cer 
in Ohio using both Hitachi 
TrueCopy and ShadowImage data 
replication software. 
With the SAN capa 
bilities of the Lightning 
9960, Focal no longer 
wastes time searching for 
data on dispersed storage 
systems, and saves money 
by reducing expendi 
tures on _ additional 
frames and connections. “Our data 
center is now laid out with Unix 
servers on one side and Windows on 
the other,” Brown says. “In the mid 
we have a SAN powered by the 
ghtning 9960 that connects these 
environments. As a result, our infra 
structure is much more efficient and 


robust than before.’ 
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department level, all the way to the 
very edge of your enterprise. 
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Hard at work at the very heart of the world’s most demanding and ‘reliable storage 

networks, you'll find McDATA enterprise solutions, Mera oca rg 

100, 10 of the.15 largest U.S. bunks, and 9 of the 10 togi ISPs. We've ( Ci +) } 
leveraged our open'storage networking technology and fabric management software 

expertise to create a full family of apen enterprise solutions = Ce McCDATA 
Day-in and day-out delivering 99.999% availability to some ace us 

prominent companies, we have the experience you'can rely gn, to0. So go to our 

web site or give us a call. Without « doubt, we've got a solution that fits your needs. 


VERITAS BACKUP AND RECOVERY SOFTWARE 
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86% of the FORTUNE 500° rely on VERITAS Software, the world leader in data backup 
and recovery. You can, too. Our consulting services team is ready to help: your company 


design and implement a data recovery_plan. Visit veritas.com today. , 
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GRID POWER 


Grid computing is an emerging va- 
riety of distributed computing used 
to tie into vast networks of under- 
utilized CPU and storage capacity. 
It could someday help brokerages 
settle stock trades on the fly and 
enable pharmaceutical firms to run 
supercomputer-type tests for can- 
cer and AIDS drugs. PAGE 28 


CONSULTING CRUNCH 


Unlike during previous recessions 
that led to extra work, independent 
IT consultants are finding it hard 
to maintain a steady stream of proj- 
ects during the current economic 
slump. Find out what some con- 
tractors are doing to keep their 
businesses humming. PAGE 30 


WEB SITE PAYOFF 


Companies like Staples and Steel- 
case are comparing online and off- 
line sales to determine whether in- 
vestments in their online efforts 
are paying dividends. PAGE 34 


CAREER ADVISER 


Fran Quittel offers guidance to a 
Unix developer who’s considering 
a switch to the Mac OS X market, a 
Cisco Certified Network Associate 
who has no work experience and a 
Web designer who’s scouting out 
the Chicago market. PAGE 36 
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PAUL A. STRASSMANN 


Still a Loser’s Game 


ORE THAN SIX YEARS AGO in this column [“Outsourcing: 
A Game for Losers,” Aug. 21, 1995], I demonstrated that the 
real reason corporations were awarding massive IT out- 
sourcing contracts was simple: Just about every firm that 
was outsourcing IT was in financial trouble. 


That column continues to be cited in books and re- 
ports that have addressed the viability of IT out- 
sourcing. Meanwhile, I continue to field inquiries 
from CIOs and a few chief financial officers on 
whether the original findings remain valid. My cu- 
riosity led me to check on some of the largest recent 
multiyear contracts for firms that outsourced more 
than half their computing resources. 

Detailed financial information for 1996 through 
2000 was available for eight such firms: AT&T, Aven- 
tis, Du Pont, Nortel, Rolls-Royce, Sainsbury, Textron 
and Xerox. Outsourcing deals of troubled firms such 
as Enron, which had a huge IT outsourcing contract, 
were excluded. 

Each of the eight corporations that have out- 
sourced most of their IT also delivered declining 
returns on shareholder equity (ROE). 

The average ROE for the entire group declined 
from 18.2% in 1996 to 2.5% in 2000. That 2.5% is be- 
low the prime lending rate, suggesting that many 
shareholders would have been better off since 1996 
investing in U.S. Treasury bonds rather than holding 
onto their shares. Such dismal performance is gener- 
ally considered a reliable indicator of an organization 
in trouble. 

It’s also remarkable that three of the firms that 
were reasonably profitable in 1996 subsequently 
showed rapidly declining ROEs that turned negative 
in 2000 — a sign of financial failure. 


The Importance of Successful Outsourcing 

According to IDC, global IT outsourcing 
(which doesn’t include application ser- 
vices, consulting services, business 
process management, network manage- 
ment and desktop outsourcing) will grow 
from a $56 billion industry in 2000 to an 
estimated $100 billion in 2005. 

The compound growth rate for such 
services will exceed 12%, which is far 
greater than the maximum projected 
growth rate of total corporate IT budgets 
of 5% per year. 

Since the U.S. accounts for about half of 





has always favored out- 
sourcing of IT functions 
that deliver measurable 
financial improvements. 
Contact him at 
paul@strassmann.com. 


global IT spending and tends to favor outsourcing 
more than the rest of the world, the projected growth 
rate of outsourcing contracts by U.S. companies ex- 
ceeds 12%. This rapid increase suggests that the IT 
scene is likely to be plagued by two new perils: 

w Outsourcing services firms are likely to suffer un- 
foreseen losses, quite possibly from contract dis- 
putes, after taking over damaged IT departments 
from troubled firms. 

@ Corporations with poor ROEs could be exposed to 
unwelcome risks if a major IT support failure occurs 
during the perilous transition from internal to out- 
sourced operations, just when there is little room for 
error in systems management. 

My observation that failing firms increasingly re- 
sort to outsourcing as one of their remedies doesn’t 
prove that the outsourcing itself is the cause of their 
troubles. The direct connection between outsourcing 
and financial difficulties can’t be demonstrated un- 
less one has access to a great deal of confidential in- 
formation about things such as changes in market 
share, investment write-offs, the effects of competi- 
tive actions or loss of patent protection. 

Nevertheless, I continue to find that major out- 
sourcing moves can be a telling symptom of a 
company in trouble, as I have shown in previous 
Computerworld columns regarding General Motors 
{June 5, 2000], Xerox [Nov. 6, 2000] and J.P. Morgan 
[May 7, 2001]. 

My conclusions about the declining 
shareholder returns that are associated 
with large outsourcing contracts would be 
less convincing if I could show that a large 
number of firms had dramatically im- 
proved their ROE before they divested 
most of their IT functions. But so far, de- 
spite my best efforts, I have been unable to 
find such data. 

So I stand by my 1995 findings that firms 
with declining returns on shareholder eq- 
uity should pursue IT outsourcing only if 
they can demonstrate provable financial 
gains that improve otherwise unfavorable 
financial conditions. B 
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Companies are beginning 
to use complex adaptive 
systems to plot future 
business scenarios. 

By Kathleen Melymuka 


MAGINE BEING ABLE to look 
into the future to see how to- 
day’s policies and initiatives 
will affect your company’s 
profitability and competitive 
position 10 years down the 
road. That’s the vision a com- 
munity of scientists in Santa Fe, N.M., 
is trying to provide through the busi- 
ness adaptation of a new type of com- 
puter-based simulation. 

Nourished by the brainpower of Los 
Alamos National Laboratory and the 
Santa Fe Institute, a complexity think 
tank, more than two dozen start-ups 


have been using supercomputers to ex- 


periment with simulations based on 
complex adaptive system theory. Busi- 
nesses have been using computer sim- 
ulations for years, but complex adap- 
tive system modeling is different. Tra- 
ditional models start with assumptions 
from historical data; complex adaptive 
systems start with the world as it is 
and track the results moving forward. 

This kind of simulation might have 
useful applications for all kinds of in- 
dustries, says Alexander Linden, an an- 
alyst at Gartner Inc.’s Frankfurt office. 
Financial services companies could 
use it to simulate capital markets, he 
says. Pharmaceutical and chemical 
companies could model the effects of 
different chemicals on organisms. The 
aerospace industry could use it to cre- 
ate materials that perform under 


| 
| 
| 
| 
| 





stress. Airlines could learn to optimal- 
ly balance cargo for the smoothest pos- 
sible ride, and so on. 

Recently, several Santa Fe-based 
companies have brought the software 
for these simulations into the world of 
business, where early applications hint 
at their potential. 


Insurance 
In the early 1990s, after Hurricane 

Andrew led to catastrophic losses esti- 
mated at $25 billion in the U.S., proper- 
ty and casualty insurers were forced to 
rethink their approach to risk manage- 
ment. Some Santa Fe scientists began 
working with big players in the insur- 
ance industry such as Swiss Reinsur- 





ance Co. in Zurich and Marsh and 
McLennan Cos. in New York. “Losses 
were so staggering that it shook the in- 
dustry to its core,” says Terry Dunn, 
president of Assuratech Inc., the Santa 
Fe-based commercial enterprise that 
grew out of the collaboration. 

Rather than try to better predict the 
likelihood of a hurricane, he says, the 


group looked at the real make-or-break | 
equation: How do an insurance compa- | 


ny’s business plan, investments and 
capital flows respond when a hurri- 
cane hits? The simulator they devel- 
oped models the environment within 
which the company operates in order 
to determine optimum capital strate- 
gies for surviving catastrophic losses. 
The simulator features a “playing 
field” and “agents.” The playing field 
is the natural environment in which 
catastrophes happen as well as the fi- 
nancial environment of capital flows. 
The agents are customers, capital 
markets, primary insurers, reinsurers 
and regulators. Agents interact 
through customer choices, contracts, 
partnerships and regulations. Finally, 
there are physical and financial wild 


_ Characteristics of 
Complex Adaptive Systems 


If you want to understand complex adaptive systems, think football: 


Elements of a simulation 
@ Defined space 


® |nteracting agents or objects that are 
intelligent and adaptive (a few dozen to a 


few hundred thousand) 


@ Agents have local information only and 
know what only some agents are doing 


® Some random events such as a natural 
disaster or economic recession 


Elements of a football game 
® Football field i! 


™ Players, coaches and referees interact 
within a set of rules, and they adapt based 
on what works 


® Players see what others in their field of 
vision are doing, but not those behind them 


@ Wild cards such as weather and injuries 
that can affect the outcome 
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cards such as hurricanes, earthquakes 
and recessions. 

Assuratech creates a virtual copy of 
the business and the business universe. 
The model includes everything known 
about competitors, customers and the 
regulatory environment as well as the 
company’s investment portfolio and 
operating strategies: markets served, 
preference for profit or market share, 
desired investment growth rates and 
efficiency of capital, adjusted cost of 
capital, and so on. 

When a “universe” of data has been 
programmed, the simulator, which can 
run on any high-end laptop, drops in 
random physical and financial cata- 
strophes and tracks capital flows 
through the company on a quarterly 
basis for a virtual 10-year period to see 
how the organization fares compared 
with its competitors. The company’s 
strategies can be adjusted to see how 
changes would affect the outcome. 

For example, if the simulation shows 
that investing in gold futures seems 
more profitable than investing in 
stocks, the company can shift its capi- 
tal to that segment and see how the 
change affects the bottom line. “The 
key here is that you get to model your 
world before you commit your re- 
sources,” says Dunn. 

“The business-as-usual model for an 
insurer is to project the future based 
on experience from history,” says John 
Schienle, director of the California 
Housing Loan Insurance Fund, a Sacra- 
mento-based state agency that issues 
mortgage loans for low- and moderate- 
income people. The agency has been 
using the simulator for nearly three 
years. 

“Assuratech’s model lets us see what 
would result from various manage- 
ment actions based on simulated 
events,” says Schienle. The agency can 


What 
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then adjust its strategies 


By testing various sce- 


accordingly, he explains. eS narios, BiosGroup found 


Without the simulator, 


several hundred million 


Schienle says, this would Practical dollars in potential sav- 
be impossible. “There are Scenarios ings, and real-world tests 


so many factors involved 


with customers con- 


in trying to model an in- @ Insurance: risk exposure —_ firmed those findings. 
dustry, it’s complex be- ® Finance: capital market “None of these ideas was 


yond what a human can behavior 


new,” says Stuart Kauff- 


imagine,” he says. @ Airlines: aircraft load man, president of Bios- 
balancing, passenger Group. “They just could- 
n’t quantify how impor- 
tant they were before.” 
chain optimization P&G has embarked on 


Supply Chain management 
Modeling EP aE 
At Procter & Gamble 

Co. (P&G) in Cincinnati, 
Larry Kellam has been us- 


; > patterns 
ing complex adaptive sys- — 


® Retail: consumer buying 


a massive project in part- 
nership with BiosGroup, 
—— software developer i2 


tem theory for two years ™ Aerospace, auto- Technologies Inc. in Dal- 


in an effort to improve 


motive: aerodynamics 


las, MIT’s Auto-ID Center 


P&G’s supply chain dy- ® Defense: scenario and other organizations 


namics. “We’re trying to planning 
move to a consumer- 
driven supply network,” says Kellam, 


director of business-to-business supply | 
ply 


chain innovation. “We are all about tak- 
ing time, cost and cash out of supply 
chain to add value to the consumer.” 

As part of this effort, P&G has been 
working with Santa Fe-based Bios- 
Group Inc., a consulting and complexi- 
ty modeling firm, to look at how differ- 
ent approaches might improve its sup- 
ply chain efficiency. 

BiosGroup developed models of 


P&G’s supply chain and then tried new | 


policies and approaches virtually. For 
instance, what if P&G relaxed its poli- 
cies that delivery trucks had to be ful! 
and that pallets stacking products with- 
in the trucks could have only one type 
of item each? What if orders were 
checked and redirected at the last 
minute rather than based on customer 
projections? What if supermarkets and 
other customers shared information 
about planned product promotions 
that might change their supply needs? 


to find practical applica- 
tions for adaptive theory. 
The initiatives include the following: 
w Developing “smart” replenishment 
software for integration into P&G’s en- 
terprise resource planning system. 

w Replacing universal product codes 
with electronic smart tags. 

w Overhauling infrastructure to allow 
real-time demand signals between 
stores and manufacturing facilities. 

gw Embedding complex adaptive theory 
inte a distribution resource planning 
tool to get inventory to where it’s real- 
ly needed regardless of what the pur- 
chase orders say. 

It’s a big job, and Kellam acknowl- 
edges that the results might still be five 
years away. “But if we do it right, we 
think we can take about half of all of 
our inventory out of the system, on the 
order of 20% of our cost and at least 
half of the time,” he says. 

Are the possibilities of complexity 
modeling worth exploring? “Absolute- 
ly!” says Gartner’s Linden. “There’s al- 
ways an increase in accuracy if you de- 
ploy specialists like those companies 
near Santa Fe.” 

But the one thing they can’t predict, 
he says, is the effect of complexity mod- 
eling on your bottom line. “You need 

to have the right data and know 

whether the prediction accuracy is re- 

ally related to added business value,” 
he explains. “Even if you do increase 
accuracy, the amount you invest may 
not justify the return. ... Nobody can 
tell you, ard that may be why the in- 
dustry is not growing as quickly as 
some people expected.” D 


While much of the Santa Fe 
complexity community is building 


7 
Quic 
| | mke virtual worlds, find out how 


Strategic Analytics Inc. focuses 
on dismantling the real world 
www.computerworld.com/q?26596 








Some pioneers 

are already using 
grids in data- and 
CPU-hungry pur- 
suits such as life 
sciences R&D 

and engineering 

and design, but ex- 
perts say widespread 
business use is far away. 
By Ted Smalley Bowen 


NTIL RECENTLY THE PURVIEW Of astro- 
physicists and drug designers, grid com- 
puting is a prime example of “latest-great- 
est syndrome” in the enterprise technolo- 
gy business. 

Some bleeding-edge companies are al- 
ready using grids in data- and CPU-hungry pursuits 
such as media production, life sciences research and 
development, and engineering and design, but ex- 


perts say widespread business use is still several years | 


off and not without caveats. 

Nonetheless, computer industry heavyweights and 
assorted start-ups are staking out turf in the brave 
new world of computational grids — potentially vast 
agglomerations of computing muscle and data that 
promise to fuel e-commerce and enterprise applica- 
tions while also serving scientific and technical needs. 

Grid computing emerged as a means for scientific 
researchers to tackle complex problems, the calcula- 
tion and processing of which would overwhelm even 
the most powerful supercomputers. Whether they 
scrape together CPU cycles from idle workstations 
or harness multiple supercomputers, grids provide 
the framework for assembling sophisticated, ultra- 
powerful virtual computers. 

These assemblages of distributed resources are 
coordinated by software that handles the differences 
among computer operating systems and manages 
things like scheduling and security. Grids can make 
available a wide range of CPU cycles, storage and 
other resources. 


Grid Alert 


Grids have generally been used in business for 
some time in the form of search engine farms and 
systems handling bioinformatics and media special 
effects, among other applications, notes Nick Gall, 
an analyst at Meta Group Inc. in Stamford, Conn. 

The grid rubric covers a wide range of private and 
public systems, some under the control of single 
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entities and others run by coalitions. To date, many 
grids have taken shape in the academic and govern- 
ment research communities, some on a nationwide 
scale. Others are internal corporate setups. 

Some of the more high-profile grids include gov- 
ernment projects such as the National Science Foun- 
dation’s National Technology Grid, NASA's Informa- 
tion Power Grid and the European Union’s DataGrid. 
There are also private corporate efforts in the aero- 
space, pharmaceutical and automotive industries. 

Grids could set the stage for a more adaptable and 
viable second wave of application service providers 
(ASP) and their acronymic cousins, xSPs. They could 
also form the basis of more flexible and powerful in- 
tranets and extranets. 

Part of the attraction is the prospect of putting the 
right mix of CPU power, data and bandwidth at 
users’ disposal as they need it, whether that’s sup- 
plied through a private, highly secure grid configura- 
tion or a loosely coupled publicly available grid. 

The prospect of plugging into grids instead of lay- 
ing out huge sums of money to upgrade internal sys- 
tems has an obvious appeal to companies trying to 
weather a down market. 

“[Given] the paucity of skilled people out there 
and the cost of training, there will be a progressive 
desire to [create a] coagulation of technology ina 
way to really leverage the skills that do exist and still 
provide the level of service users are really looking 
for,” says Dave Turek, vice president of emerging 
technologies at IBM. 

In addition to technology heavyweights such as 
IBM, Sun Microsystems Inc. and Hewlett-Packard 
Co., smaller players such as Markham, Ontario-based 
Platform Computing Corp., San Diego-based En- 
tropia Inc. and Austin, Texas-based United Devices 
Inc. are pushing various enterprise and vertical- 
industry grid tools as well. 

But don’t look for grids to overlay the enterprise 
for at least a few more years, because the infrastruc- 
ture tools and business adaptations are still taking 
shape, according to observers. 

“Full-blown grid computing is still about two to 
three years out, and five years from being a big im- 
pact,” says Gall. 
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Grid Crossing 
The following are some vertical industries 
and potential applications for CPU and 
storage-intensive grid networks: 


FINANCIAL SERVICES: Brokerages could use them 
to clear and settle trades quickly instead of relying on 
lengthy batch-processing runs; investment banks 
could also tap into them to run risk analyses. Insurers 
could use them to try to predict the potential cost out- 
lays of a major earthquake or other disasters for com- 


HEALTH CARE: Pharmaceuticals could use them to 


AUTOMOTIVE: Automakers could use grids to run 
simulated tests on the aerodynamics of vehicles that 
are being developed. 

AEROSPACE AND DEFENSE: Big aerospace and 


defense contractors could use grids to conduct simu- 
lated stress tests on fighter jets or space shuttles. 


To that end, the business models for delivering, 
supporting and charging for grid services and appli- 
cations also have yet to jell. And while it might be 
tempting to view grids as the one hammer for all 
your nails, the trick for IT managers is to identify if 
and where grids are appropriate. Work remains on 
such key functions as load balancing, cluster man- 
agement, resource identification and sharing and 
database integration, as well as ensuring a useful 
degree of standardization, according to observers. 


Gridlock 


Indeed, the transition won't be automatic, since 
R&D labs have different computing needs than cor- 
porate IT centers. 

“A grid as an object that scavenges spare cycles 
from someplace is less useful to the enterprise than a 
grid as a mechanism for locating data resources,” 
says Robert Hollebeek, a physics professor and direc- 
tor of the National Scalable Cluster Project at the 
University of Pennsylvania in Philadelphia. 

As a first step, IT managers would be wise to ask, 
“Are they really in an enterprise that could benefit 
from better communication and sharing of resources 
in a wide-area networked setting? If so, they could 
start adopting some autheniication mechanisms so 
they can participate in a grid with trusted entities,” 
Hollebeek advises. 

“In the context where it’s hard to predict how 
much you'll need to ramp up your systems and what 
you'll need to integrate, grid computing provides 
some flexibility,” says Paul Kearney, director of bio- 
informatics at Caprion Pharmaceuticals Inc. in Mon- 
treal. “It’s not clear to me thai someone would 
choose to migrate to grid computing when their data 
is more homogeneous and integration of technology 
moves at a slower rate.” 





Plus, computers strung together in a distributed 





fashion would be virtually useless for many low- 
latency applications, which would be bogged down 
by the Internet’s communications delays. 

“I don’t find the concept of lashing computers to- 
gether with grid middleware to do very large calcula- 
tions appealing. Many of the compute-intensive ap- 
plications of interest to us have stringent latency and 
bandwidth demands,” says Thom Dunning, director 
of the North Carclina Supercomputing Center in 
Research Triangle Park and vice president of high- 
performance computing and communications for its 
parent organization, MCNC. CPU-hungry enterprise 
applications fall into this category. 


Finding a Fit 

The appropriateness of grid computing depends 
on whether businesses “have problems that need sig- 
nificant computational resources and can be distrib- 
uted,” says Alex Bangs, chief technology officer at 
Entelos Inc., a Menlo Park, Calif.-based bioinformat- 
ics company. “Do they really need to sit on some 
giant 64-processor machine or some big mainframe, 
or can they be broken up into small pieces and those 
small pieces be crunched on a smaller machine, 
whether that machine is sitting in a server room 


| somewhere or whether that machine is some idle 


cycles from somebody’s desktop?” 

Entelos develops complex computer models of 
human diseases and virtual laboratory software for 
researching the diseases and developing treatments. 
The company works with pharmaceutical giants such 
as Aventis, Pfizer Inc. and AstraZeneca PLC, whose 
vast intranets and countless desktops make them 
ideal grid computing users. Both Entelos and the 
pharmaceutical companies use grid computing to 
fuel the heavy-duty processing needed to run the 
virtual experiments. 

“We're doing a specialized kind of modeling. In 


general, people do all kinds of models — there’s fi- 


nancial models, and even the data mining is a lot of 
times based on a model,” Bangs says. “What scaling 
up to grid computing means is being able to look at 
many, many more variations of those models.” 
Players in other industries such as automotive 
design are also beginning to harness the potential 


| of grid computing. 


“We're working on the complete aerodynamics of 
the race car,” says Kevin Colburn, team leader for 


| computational fluid dynamics at the West McLaren 


Mercedes Formula One racing team in Woking, U.K. 
“We're concentrating on typical kinds of aerospace 
things like the front and rear wings of the car. But we 
also analyze suspension components for their angle 
and orientation, [as well as] radiator flow, air box, 
you name it.” 

More important, grids “allowed us to do the same 
amount of work quicker, and then allowed us to re- 
search other areas of the car that we may not have 
done previously because we didn’t have the compute 
capability,” Colburn says. D 
Bowen is a contributing editor at Technology Research 
News. Contact him at ted_bowen@hotmail.com. 

. 
To learn more about the security challenges facing 
grid computing, go to: 
www.computerworld.com/q?26598 
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Normally, the sky’s the limit when 
it comes to consulting opportu- 


nities ina bad labor market. 
* A Notthis year. Merely surviv- 
,-# ing will be a challenge, and 
» é\ many will find themselves 
earning less or doing other 
° . ‘ 
things. By Leslie Jaye Goff 
CCORDING TO CONVENTIONAL wis- 
dom, IT consultants should have a 
stellar year, due to the downward- 
spiraling economy. But looking out 
over the next 12 months, 2002 is 
shaping up to be a highly unconventional year. 

Traditionally, independent consultants and 
consulting agencies are in high demand during 
economic downturns. After periods of massive 
layoffs, companies reluctant to add full-time 
staffers to their payrolls have turned to contract 
employees to fill the gaps on IT projects. 

But despite economic conditions that have 
been good for IT consultants in the past, many 
consultants and agencies say they fear a drastic 
downturn in their business this year. 

“Business is deadly slow — slower than I’ve 
ever seen it,” says Beverly Nadelson, vice presi- 
dent of All Star Consulting Inc. in San Francisco. 
“Generally, around this time of year, our clients are 

calling about their upcoming projects. But I’m 
hearing none of the usual noise about anything 
new, and that’s not a good sign.” 

The fortunate consultants had gigs that saw them 

through the end of 2001, but as they started to look for 
first-quarter work in December and January, many 

came up dry. While some independent consultants and 

agencies say they cautiously hope to generate at least as 

much revenue as they did last year, none of them expect the 

blockbuster growth they took for granted in the late 1990s. 

For many, the slowdown started last year in response to continu- 
ing dot-com closures, the slumping stock market and corporate cut- 


onsultants 
INCRISIS 
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backs. While a July-to-August slowdown is business 


as usual for most consultants, some say the economic 


instability that followed the events of Sept. Il 
quashed the usual fall rebound. 

Greg Hollings, president of Visionary Computer 
Consulting Inc. in Lakewood, Colo., says that the ter- 
rorist attacks on the U.S. decimated his prospects. He 
expects his business to be down by 30% this year. 

“I was just totally floored by how much of an effect 
{Sept. 11] had on my business,” says Hollings, a Java 
applications developer who spent much of 2000 and 
2001 working with dot-coms and telecommunica- 
tions firms. With the high-tech industry downturn, 
“it was already getting quieter, but it seemed that was 
just the last nail in the coffin,” he says. “A lot of 
clients just shut their doors and stopped talking. It 
has been flat since then.” 

Even consultants who are getting inquiries from 
potential clients express concern about client com- 
panies’ ability to pay for IT consulting services. 
“There’s just no money,” Nadelson says. 

David Randolph, an independent consultant in 
Plano, Texas, says he’s getting the usual number of 
calls from prospective clients that he typically gets at 
the beginning of a new calendar year. But he has also 
seen clients’ budgets dry up. His company, Prairie 
Trail Software Inc., generated more volume in 2001 
than in 2000, but its revenue was down because 
many clients couldn’t pay their bills. 

“Many of the checks we received bounced,” ex- 
plains Randolph. “I'd love to say we’ve worked out 
payment plans with them, but we keep checking with 
their banks, and they still don’t have the money.” 


Good Times Ahead? 


Despite a rough first quarter, many in the IT con- 
sulting community remain steadfastly optimistic 
about a second- or third-quarter upswing in both the 
economy and their prospects. 

Independent consultants acknowledge that the 
days of juggling three or four simultaneous projects 
at high rates are behind them for now. But they say 
they expect that pent-up demand for mission-critical 
projects will finally loosen clients’ purse strings and 
that the market forces that have traditionally favored 
consultants will come back into play. 

“Any company that wants to gain a competitive ad- 
vantage and has the wherewithal to do so will use 
consultants,” says Randy Hayman, president and co- 
owner of IT services firm Purelce Inc. in Eagan, 
Minn. “They won’t want to take the payroll risk of 
adding full-time employees until they see some cer- 
tainty in their future. And that’s why I continue to be 
upbeat on 2002.” 

Consultants and agencies say they expect compa- 
nies to go forward with technology initiatives that 
generate new business, such as customer loyalty pro- 
grams and other customer relationship management 
applications. Another key area of consulting activity 
should be systems that streamline business processes 
and cut costs, such as supply chain management sys- 
tems, they say. 

The health care industry’s mandate to comply with 
the Health Insurance Portability and Accountability 
Act of 1996 may also create consulting opportunities, 
consultants and agencies say. With those initiatives 
already consuming IT staff resources, health care 
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Get Back 
To Work! 


Job-searching advice for 
unemployed IT consultants: 


oO 


Get out and network. 


e 


Market your 
problem-solving skills. 


© 


Prepare to adjust 
your rates. 


© 


Be open to agencies 
and recruiters. 


9 


Volunteer your services 
to a nonprofit group. 


© 


Consider forming 
your own consulting 
practice. 


e 


Maintain a 
positive attitude. 





| evaluating new specialties to pursue 
| say that they’re giving the market ample time to re- 
cover before they hit the panic button. 








providers may turn to consultants for other projects. 
The key to getting a fvuot in the door on these types 
of projects this year, consultants and agencies ex- 
plain, will be promoting your business expertise and 
customer service ethic rather than specific technical 
skills. “You need to change your frame of mind,” says 
Randolph. “Show customers that you'll do everything 


| you can to resolve a business problem for them.” 


Consultants can also no longer rely on receiving 


| the high rates they’ve commanded during the past 


few years, particularly in the traditionally higher- 


| paying markets. In the San Francisco Bay area, for ex- 
| ample, the rates clients are willing to pay have gone 


down by 20% to 25%, says Nadelson. 

“Rates are completely client-driven, so you have to 
figure out what a client wants to pay and go from 
there,” she explains. “We have one project manager 
who was getting $100 an hour, and now the most that 
a client will pay for project management is $60 an 
hour. The rates are going down to where they were 
five to seven years ago.” 

Although the outlook is uncertain, seasoned con- 
sultants are riding out the downturn with an eye on 
the long haul. They’re taking the requisite steps to 
generate new business — networking with col- 
leagues, repositioning their marketing messages and 
but they also 


Christine Hokans, president of CMH Systems Inc. 


in Belmont, Calif., counts herself among the lucky 
consultants who had a steady project through the 
| end of last year. She says she’s giving herself three 


months to line up her next gig. At that point, Hokans 


| plans to evaluate looking for a staff position, al- 


though she’s loath to consider it. 
In the meantime, Hokans says she’s using her free 
time to seek IT volunteer opportunities and attend 


| user group and professional association meetings for 
| face-to-face networking. She’s also eliminating extra- 
| neous expenditures. 


“My husband and I eat out a lot, and we made a 


| New Year’s resolution that we'll cook all but one 


night a week,” Hokans says. “So I’ve got all my cook- 


| books out. And no more Starbucks every day.” 


Instead of panicking, Hokans and other consul- 
tants say they’re trying to view their newfound free- 


| dom as the silver lining of the economic slowdown. 

| They say they’re spending more time with their fam- 
| ilies, purging the stacks of papers and magazines that 
| clutter their offices, getting back to the gym and pur- 
| suing other activities that they haven’t had the spare 
| time to enjoy. 


“One of reasons I got into consulting was to have 
more control over my personal life, and I’ve had a lot 


| of personal time in the last quarter,” Hollings says. 


“I’m thoroughly enjoying that. I’m an irrepressible 


| optimist, or I never would have become a consultant 
| to begin with.” D 


Goff is a freelance writer in New York. Contact her 
at lgoff@ix.netcom.com. 


IT HIRING 2002 


For access to this article online, additional resources and related links, please 
visit Computerworlds Web site at www.computerworld.com/q?25915 
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QUALITY OF SERVICE. 


AVOIDING EVEN THE SMALLEST MISTAKES. 


QUALITY OF SERVICE. It’s much more 
than giving your customers super service. 
It’s about getting your IT systems to extend 
the courtesy as well. 

That would mean they are available, 
scalable and performing, around the clock. 
But how do you get there, now? 

You start with consulting in the shape of 
IBM Global Services. We’ll uncover, and 
eliminate, any technical glitches in your 
infrastructure before they turn into crises 
or customer care problems. 

Then, employ Tivoli® software to ensure 
content is current and always available. If 
there’s ever a problem Tivoli is sure to find 
it long before your customers do. To top it 
off, Tivoli’s security policies can ensure 
your site is always completely protected. 

Right now, together with our Business 
Partner Commercial Ware, we’re now helping 


Patagonia, an environmentally conscious 


maker of outdoor clothing, conduct their 
e-business 24 hours a day. Their customers 
can now have immediate access to order 
information at all times, regardless of what 
channel they used to place their orders. 

The result? Patagonia’s customer relations 
have improved and Patagonia.com revenue 
has grown year by year. 

But this is just the beginning. There’s 
more on the way. Soon we'll be seeing self- 
optimized environments: environments with 
systems that are capable of healing, protecting 
and configuring themselves. 

These environments are as flexible as your 
customers, partners and suppliers expect 
them to be. 

Find out ail that you can, soup to nuts, 
at ibm.com/e-business/quality, or call 
800 426 7080 (ask for Quality) for our latest 
white paper, Quality of Service - Evolving 


to the Next Generation. 
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Forget counting page hits. Compare 
online and off-line sales to determine 
true ROI. By John Webster 


ESPITE last year’s dot- 
com disasters, the Web 
continues to be a part of 
virtually every compa- 
ny’s marketing strategy. 
The question isn’t 
whether or not to have 
an online presence; it’s how to tell 
whether — and by how much — the 
Internet increases market share and 
fattens the bottom line. 

The problem is that most companies 
have no idea how to accurately mea- 
sure return on investment when it 
comes to their Web sites. Counting hits 
and monitoring visitor behavior have 
become de rigueur, but neither one an 
swers the thorny question of how 
much a company earns — or saves — 
by marketing on the Web. 

Meanwhile, even in the midst of a 
down economy, companies continue to 
invest money in their Web sites. But 
now top managers are pushing harder 
than they once did for proof that the 
sites are more than glitzy money pits, 


according to Lisa Melsted, an analyst at 


The Yankee Group in Boston. 

The average company budget alloca- 
tion for a Web site is about $500,000 
annually, according to a survey of 200 
companies that The Yankee Group 
conducted in August 2001. While over- 
all expenditures have likely come 
down somewhat over the past several 
months due to cutbacks and layoffs, 
Web site maintenance is still a large 
expenditure, Melsted says. 

Comparing Web sales with sales 
generated by other channels is an 
important ROI metric that can help a 
company determine how online 
activities stack up against overall 
business goals. At $10.7 billion Staples 
Inc. in Framingham, Mass., the value 





of a customer is based in part on how 


| many channels he uses to buy prod- 
| ucts. That means analyzing sales 

| generated over the Web, at retail 

| stores and from the catalog. 


“We focus on integrating sales data 


| across all our channels to create met- 
| rics that refer to the lifetime value of 
| the customer,” says Mike Ragunas, 

| chief technology officer at the office 


supplies retailer. “We’ve found that in 


| terms of sales, a three-channel shopper 
| is worth 4.5 times that of a retail-only 
| shopper.” 


Two Channels Are Better Than One 


Similarly, St. Petersburg, Fla.-based 


| HSN LP, a $1.8 billion multichannel re- 


tailer best known for its Home Shop- 


| ping Network, has found that cus- 

| tomers who shop both online and from 
| television spend 26% more than those 

| who shop through a single channel. 


If a company experiences an in- 
crease in Web site visitors that doesn’t 


Excuses, Excuses 


Companies say they don’t calculate ROI because: 


It's not worth the effort. 


w It takes too long. 





Payoff 


result in increased sales, something is 
wrong, says Eileen Raphael, manager 
of Steelcase.com, the online arm of 
$3.9 billion office furniture maker 
Steelcase Inc. in Grand Rapids, Mich. 
After launching the company’s first 
Web site in 1995, Raphael watched site 
traffic double every year; but the num- 
ber of sales leads didn’t double. 
Steelcase learned from customer 
feedback that visitors to the site were 
frustrated by its design and felt that it 
didn’t provide enough information to 
place orders. “When we decided to re- 
launch, we were getting 110,000 to 
120,000 visitors per month, so there 
was a tremendous opportunity to build 
our customer base,” Raphael says. 
Now, Steelcase looks at both revenue 
and cost savings to measure the ROI of 
its relaunched Web site. For example, a 
salesperson at one of the company’s 
800 outlets might earn $75,000 per 
year. If Steelcase.com can provide 
product information without getting a 
salesperson involved, it saves an hour 
of the salesperson’s time, or about $36. 
“If we can save one hour of time for 


| a dealer salesperson every week, that 


adds up to millions of dollars per year 
in people’s time,” says Raphael. 
Countrywide Credit Industries Inc., 
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a $2 billion financial services company 
based in Calabasas, Calif., is also see- 
ing increased sales online as a result of 
a Web site overhaul. The company re- 
designed its site two years ago based 
on customer feedback and Web site 
performance. 

Countrywide’s IT group built soft- 
ware that lets the company track 
“events,” such as how many people fill 
out loan applications online and how 
many applications result in loans. To 
do that, Countrywide had to integrate 
the Web site with back-end databases 
and enterprise applications. This 
process also lets the company more 
easily measure Web site activity in 
terms of its overall business objectives, 
says Larry Gentry, vice president of 
e-commerce. 

For example, Countrywide now 
knows that its Web sites account for 
48% of overall loan funding, up from 
only 5% two years ago. 

Also, providing services such as elec- 
tronic statements and online rate cal- 
culations via the Web site has yielded 
cost savings. Previously, Countrywide 
provided those services at a higher 
cost via mail and fax. “The immediate 
ROI is cost reduction. Now that we put 
those services online, customers get 
the information sooner and we get the 
cost savings,” says Gentry. 

The bottom line is that instead of 
poring over reams of data, IT’s time is 
better spent developing ROI measures 
that can show how well the company’s 
Web channel is performing compared 
with other sales channels, says Bill 
Gassman, an analyst at Gartner Group 
Inc. in Stamford, Conn. D 





Webster is a freelance writer in 
Providence, R.I., who frequently covers 
technology. Contact him at 


| johnwebster!@earthlink.net. 


Ask & Answer 


Instead of looking only at revenue and 


site visits to determine Web site 
ROI, consider the following: 


w Is the Web site creating efficiencies across the business 
that you didn’t have before? 


m Do you provide enough information online to cut down on 
the number of calls to your toll-free number? 


Base: 362 e-commerce managers; multiple responses allowed 
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You see a voi Cc emai / waiting on your laptop. So now you can share and respond to information however 


you want. It’s possible when Avaya transforms your company’s voice and data systems by getting them working together. 
Reliably. Securely. With our innovations in voice and in-depth expertise in data, you slay accessible, you stay connected. 


Find out why more than 90% of the FORTUNE 500° use Avaya communications to power their business, visit avaya.com/nowtwo. 


AVAYA 


COMMUNICATION WITHOUT BOUNDARIES 





“Revealing” 
“An Industry Standard” 


“Well Researched” 


RHICONSULTING 


SALARY 
GUIDE 


Compiled from our more than 100 offices, our salary data is up-to-date and 


comprehensive. Use it to help recruit and retain the best technology talent 
Call today for your free copy or visit us online at rhic.com. Knowledge is power 
Our salary guide can help power your future. 


RHICONSULTING’ 


Technology Professionals 


A Robert Half International Company 


POWER YOUR FUTURE 
rhic.com * 800-793-5533 
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Dear Career Adviser: 


I’m a Unix application developer looking for 
work. Even in this market, I would like to do 
something interesting, and I have thought 
about working on the new Mac OS X. Are 
companies hiring in this area? 


Dear Hunting: 

While opinions vary regarding how 
quickly OS X development experience 
will get you new work, being able to 
work across multiple operating sys- 
tems is a definite plus. “Interest in de- 
veloping for this market has ratcheted 
up significantly now vs. even six 
months ago,” says Doug Hill, senior 
project leader at Smart Technologies 
Inc., a developer of meeting productiv- 
ity technology in Calgary, Alberta. 

That’s partly because 
Apple Computer Inc. is 
now shipping machines 
with OS X as the default 
operating system. Plus, 
there’s a native version of 
Microsoft Office that runs 
on OS X, not to mention 
better documentation to 
bolster OS X application 
development. 

Getting hired for OS X 
development work is pos- 
sible, particularly if you 
have a Unix or Java back- 
ground and want to devel- 
op applications for mar- 


| kets such as education, graphics, video 


editing or games or work on hardware 
and peripherals. 


Dear Career Adviser: 

I recently became a Cisco Certified 
Network Associate. Other than this cre- 
dential, I have little to no formal com- 
puter training. I have been trying to get 


| ajob now for close to two months, but 


apparently nobody wants someone with 
no experience, even though I aced my 
Cisco exam. What can I do? 

— NO TAKERS 


Dear No: 

In today’s world, any training or cer- 
tification needs to be backed up with 
work experience. If you can’t find a job 
because you have no experience, work 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send 
questions to her at 
www.computerworld.com/ 
career_adviser. 





— HUNTING HARD 


| as an apprentice, even if it’s in your 


spare time for no pay at a small busi- 
ness or for a nonprofit group. That’s 
the suggestion of Mark Skvarna, dep- 
uty superintendent of Baldwin Park 
Unified School District in Baldwin 
Park, Calif., who created the district’s 
Teaching Technology Program. 


Dear Career Adviser: 
After spending a year as a Cobol pro- 
grammer and another year 
as a help desk analyst, I re- 
cently completed a program 
in Web design at a tech 
school, with straight A’s. I 
know HTML, JavaScript, 
Photoshop, Dreamweaver 
and Flash, and I want to 
land a job as a Web design- 
er. What are my chances, 
particularly in Chicago? 

— NEWLY MINTED 


Dear Minted: 


Although you have a re- 
cent degree as a Web de- 
signer, you're actually a day late and a 
dollar short for the Chicago graphics 
market, says Jeff Pace, president of 
WebGroup LLC, a recruiting firm with 
offices in Chicago and Detroit. While 
your Cobol experience could be benefi- 
cial for Web development because of 
your coding and structured program- 
ming background, your actual experi- 
ence is lacking. Plus, if you go after Web 
designer jobs, you’re competing against 
more experienced creative talent who 
are also vying for Chicago jobs. 

More practical approaches would 
include returning to help desk or end- 
user support work in a corporate envi- 
ronment or doing outsourced call cen- 
ter support for a vendor and then trying 
to move up within the company, says 
Pace. With a four-year degree in this 
market, you might earn $30,000 per year 
or more supporting intricate software. DB 
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3rd Annual 


ITLEADERS 
CONFERENCE 


March 3-5, 2002 
Marriott Desert Springs 
Palm Desert 
California 


See how award-winning IT Leaders 
solve real-world issues with: 
CRM 


Connecting customer systems with the supply chain for business innovation 


Best practices in measuring IT project results and aligning with senior 
management goals 


Supplier Management 


Mastering the art of negotiating and creating true partnerships with vendors, 
outsourcers, and service providers. 


Infrastructure Strategies 


Maximizing data management, networks, storage and wireless technologies 


Enterprise Integration 
Creating value with existing IT architectures, Windows migration and Web-based technologies 


Securit 
How much is really enough? Calibrating security needs against budget realities 


SELECTED SPEAKERS AND MODERATORS: 


; OF Leo Leger at 508-820-8212. 





More hospitals around the world are running 
their “life-or-death” applications on Caché 
than on any other database system. 

With proven reliability like this, you should 
consider Caché for your critical applications. 


With its lightning speed and massive scalability, 
the performance of Caché makes it a perfect 
match for any enterprise, in any industry, with a 
requirement for fast transaction-processing 
applications capable of scaling to tens of 
thousands of users. 


Caché uniquely combines robust object and 
relational technologies, coupled to a multi- 
dimensional data engine. Plus, it includes a rapid 
Web application development environment. 


Caché is backed by 24x7 support from 
InterSystems — a leader in high performance 
databases for 23 years, with 4,000,000 users* 
worldwide in healthcare, financial services and 
other industries. 


InterSystems » 


Ee CACHE 


Make Applications Faster 


Download Caché for free or request it on CD at www.InterSystems.com 


* InterSystems’ database technology is used by Ameritrade, Hitachi, Johns Hopkins, Kennedy Space Center, 
Pepsi Cola, Prudential Insurance Co., Shell, U.S. Army, World Bank and other successful enterprises 


f thew respective vendors 
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THINS IN 


There are a number of reasons for 
IT to move to server-based appli- 
cations feeding thin-client systems. 
They can reduce equipment main- 
tenance and upgrade costs, provide 
fewer end-user problems and offer 
better control over applications 
and data. PAGE 40 


AGILE AND VERSATILE 


A new breed of “lightweight” pro- 
gramming systems, such as ex- 
treme programming, emphasizes 
rapid iteration and interaction with 
users. Such systems are proving to 
be effective for smaller, faster proj- 
ects. PAGE 42 


QUICKSTUDY 


PHP is an open-source language 
designed for creating Web applica- 
tions. Devotees say it’s exceptional- 
ly easy to learn and use, and one 
corporate IT manager says it has 
helped cut his IT costs sixfold. 
Find out more in this week’s 
primer. PAGE 46 


SECURITY JOURNAL 


From newly discovered router vul- 
nerabilities to viruses traveling in 
on Secure Sockets Layer sessions, 
Vince Tuesday has his hands full in 
the new year. This means that 
long-range planning moves to the 
back burner. PAGE 48 





TECHNOLOGY = 


NICHOLAS PETRELEY 


Baseball Cap Linux 


T THE TIME OF THIS WRITING, rumors are flying that AOL 
Time Warner may purchase Red Hat Inc. I’ve read many opin- 
ions and speculations on the motives behind such a move, but 
nobody seems to know yet why AOL Time Warner would be 
interested in Red Hat. I know at least one reason: AOL Time 
Warner should buy Red Hat to make its version of Linux the basis for an 


inexpensive all-purpose home console. 


Like Microsoft, AOL Time Warner would have to 
take a loss on every box. But the company could 
make up for the loss in monthly access fees, not to 
mention royalties on the game and other software de- 
veloper kit licenses. AOL Time Warner customers 
would upgrade in a minute if they thought it meant 
using its software on a box that doesn’t crash all the 
time. Throw in Star Office and a few other goodies, 
and it could make most home computers obsolete. 

Assuming this is what AOL Time Warner is after, 
then I can see why Red Hat is the ideal target. AOL 
users don’t strike me as the kind of people who know 
or care much about Linux. If they have heard of Lin- 
ux at all, it’s probably because they’ve heard of Red 
Hat. So while the public relations benefits may be 
very small, AOL Time Warner would get more public 
relations brownie points from Red Hat than from any 
other Linux distribution. 

Red Hat Linux is also the top pick because it has 
weathered the recession better than any other distri- 
bution. This allowed Red Hat to keep much of its 
original talent intact, while other companies have 
had to lay off some of their best and brightest. 

A Red Hat purchase would also make it less likely 
that the open-source community would protest AOL 
Time Warner’s entrance into the Linux market. Not 
everyone likes Red Hat, but most people agree that 
it’s dead serious about keeping the open- 
source model pure. As long as the 
purchase doesn’t precipitate an employee 
exodus from Red Hat, the open-source 
community isn’t likely to assume that AOL 
Time Warner will try to poison Red Hat 
Linux with proprietary exterisions. Con- 
sidering the state of the economy, AOL 
Time Warner can be reasonably confident 
that there won’t be an exodus unless it re- 
ally botches the transition. 

The worst-case scenario is that AOL 
Time Warner would cause Red Hat to 
stagnate and fade into irrelevance. So 


| 
| 
| 


NICHOLAS PETRELEY is a 
computer consultant and 
author in Hayward, Calif. 

He can be reached at 


what? Linux will live on even if the company kills 
Red Hat outright. Red Hat Linux is just a collection 
of open-source code that anyone can modify, improve 
and sell. So plenty of commercial Linux distributors 
(not to mention Linux advocates such as IBM) could 
leverage Red Hat’s existing market share and code 
base by repackaging and selling an improved version 
of Red Hat under another name. MandrakeSoft and 
Caldera built their businesses on that model and fal- 
tered only after they strayed too far from it. 

Here’s why IT people should hope AOL Time 
Warner is planning to build an appliance and that it 
succeeds: It would be a grand proof of concept for 
Linux as a platform for the average Joe. It would turn 
Red Hat Linux into Baseball Cap Linux, if you will. 

If AOL Time Warner customers began to replace 
their PCs with AOL Time Warner appliances, they 
may not know or care that they’re running Linux. But 
you can bet savvy IT administrators would notice. 
These AOL Time Warner boxes would prove that 
Linux has all the frills of Windows minus the crashes 
and cost. After that, it’s a no-brainer to deploy similar 
desktop appliances at work in order to save bundles 
of cash. And if AOL Time Warner doesn’t want to cre- 
ate such appliances, I’m sure IBM and others would. 

Once Linux started to penetrate the desktop, there 
would be no stopping it. The reason is security. It’s 
far easier to secure a Linux or any Unix- 
based system against intruders, viruses 
and Trojan horses than it is to secure a 
Windows box. I’ve heard from many read- 
ers who decided to adopt Linux for this 
reason and are glad they did. But not near- 
ly enough people have expended the effort 
to see that Linux is easier to secure than 
Windows. 

If AOL Time Warner makes Linux main- 
stream, more people could finally find out 
for themselves. And for anyone who has 
been hit with the Melissa or I Love You 
viruses, there would be no turning back. B 
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Thintrastructure 


client software sports sophisticated load-balancing 
features to optimize back-end server performance. 
Server farms can span data centers, allowing unin- 
terrupted computing during a system upgrade or 

a catastrophic failure. Most systems now support 
Secure Sockets Layer encryption. 

But thin clients don’t fit every situation. They 
can’t support high-end graphics applications, and 
power users may need their own desktop systems. 

Companies with thin-client systems can save mon- 
ey by avoiding PC upgrades, but that’s just part of 
potential savings, says Dan Kusnetsky, an analyst at 
IDC in Framingham, Mass. In a typical computing 
implementation, “staffing is 50% to 75% of 
the three-year cost,” he says. Such savings 
can more than off-set increased costs of 
servers and software, Kusnetsky says. 

John Bolz, systems architect at Wells 
Fargo & Co. in San Francisco, agrees but 
says it’s hard to get top management to see 
beyond initial costs: “You can talk [total 
cost of ownership] till the cows come home, 
but the cost of deploying servers appears 
to a lot of eyes as a significant expense.” 


CALL IT THIN-CLIENT, server- 


TECH la centric computing or virtual user 


interface software. Products like 
TRANG Sisoztns tear 
UU vices and Tarantella Inc.’s Taran- 

tella Enterprise, traditionally found 


in corporate settings, send only user interface and 
keystroke data between client and back-end systems. 
Using proprietary protocols, these products offer 
faster access to back-office applications on low- 
bandwidth wide-area networks while reducing infra- 
structure and administration costs. So far, IT depart- 
ments have been reluctant to deploy this 
technology to internal LAN clients or toa FRUMYAUEmeniatel 
wider range of applications, but that PM CeCe 
could change as thin-client systems be- ah 
come more attractive for enterprise use. 
The newest systems make client soft- 
ware a standard browser plug-in, extend- 
ing the hardware that’s supported. On the 
back end, administrators can configure 
the systems to let users access applica- 
! tions though an intranet Web page. Thin- 


Overview 


Many enterprises are moving away from 
PCs to server-based applications feeding 
thin-client systems. Compared with desk- 
top PC systems, modern thin-client soft- 
ware can reduce equipment maintenance 
and upgrade costs, introduce fewer end- 
user problems and offer better control of 
applications and data. Thin-client systems 


more users are affected by network out- 
ages. Moreover, thin clients won't do for 
compute-intensive or graphics-intensive 
applications, and there’s no off-line access. 


By Robert L. Mitchell 
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CASE STUDIES 


an office in November 2001 to coordinate 
Afghanistan relief efforts, “connectivity is 
a challenge, and support for complex ap- 
plications is difficult to achieve,” says Ole 
Oftedal, acting chief of the systems group. 


Workers in remote field offices connect 
to the agency’s ERP system using a 
browser-based Citrix thin client that can 
run efficiently over the low-bandwidth 
connections provided by its dial-up ISP or 
satellite services. The system handles 
poor-quality dial-up connections well, 
Officials say, but latency issues over 
satellite links have been a problem. 


How the World Food 
Program Delivers the Goods 


WORLD FOOD PROGRAM, ROME 
Feeding Off 
The System 


WHO THEY ARE: A United Nations 
agency delivering food to underdevel- 
oped areas 


ISSUES: World Food Program CIO Ken 
Herman likes Citrix Systems Inc.'s Meta- 
Frame enough to deploy 30 Wyse Tech- 
nology Inc. Windows thin terminals at 
headquarters for SAP training, which he 
says cost 75% less than PCs. But the 
600 PCs at headquarters still run the 
standard SAP client. “As CIO, it's not 
clear to me that I'll replace traditional 
desktops, given that you have to scale 
the back end so high,” he says. 


VSAT SATELLITE 
OR DIAL-UP INTERNET 


GOAL: Let relief workers in Pakistan 
and other countries access its ERP sys- 
tem in Rome to directly coordinate food 
shipments. 


DIAL-UP 
INTERNET 


Se 


CHALLENGE: The system must work FIREWALL 


in areas with poor connections or over 
VSAT links, and with no local support. 


STRATEGY: Install MetaFrame XP on 
Windows 2000 servers in Rome for 
access to an SAP AG system; install a 
browser-based client on thin-client de- 
vices and ship them to remote locations. 


COMMENTS: In places like Islamabad, 
where the World Food Program opened 


PAYOFF: After receiving preconfigured 
thin-client PCs and basic instructions, 
users were able to access the ERP sys- 
tem in Rome. “We got the Pakistan op- 
eration up and running in two hours,” 
says Oftedal. The systems are easily re- 
configured to use a backup VSAT con- 
nection, although latency created some 
connection problems. The World Food 
Program has since rolled out the system 
to 300 users in 29 other countries. 
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‘Thin Clients for 
‘Tough Times 


Excerpts from a conversation with Steve 
Kaplan, a vice president and general manager 

at Houston-based Citrix reseller Vector ESP 
Inc. and co-author of the book Citrix Metaframe for 
Windows Terminal Services: The Official Guide (Mc- 


Graw Hill, 2000). 


Is it time to reconsider thin-client computing for 


dows 2000 without touching the PCs. One thing that 
people usually miss is they don’t think about the remote 
offices and how they're going to be able to eliminate the 
infrastructure out there. 


What’s the most common mistake made when 
assessing the business benefits of thin-client 
computing? Putting in this infrastructure but then only 
using it for a coupie of applications. If you're going to do 
it, do it for the whole desktop. Sure, you can make ex- 


What's holding back wider adoption of thin- 
client computing? | think it's people who rise up 
through IT decision-making because of an ability to 
manage perceived risk. And the most scary thing to a 
CIO is thousands of users screaming at them. It's fear. 
It's job security. 


its economic benefits? This is the way to deploy Win- 


ceptions, but for the most part, go thin client everywhere. 


TECHNOLOGY 
Is Thin Client Enterprise-Ready? 


RECENT IMPROVEMENTS 
ANALYSIS in thin-client software 

were enough to convince 
Wells Fargo & Co. to buy a 10,000-user 
license for Citrix Systems Inc.’s Meta- 
Frame XP. “We are geographically dis- 
persed, and keeping servers and worksta- 
tions up to date is becoming a very ex- 
pensive proposition,” says John Bolz, vice 
president and systems architect at Wells 
Fargo in San Francisco. 

Ole Oftedal, the World Food Program’s 
acting chief of the systems group, is deploying thin 
clients at more than 300 locations worldwide and 
considers thin-client systems a perfect fit for com- 
plex enterprise applications like SAP. 

“(SAP is] a dirty application, from a systems point 
of view,” he says. “It’s tough to maintain and diffi- 
cult to deploy over a wide-area network.” Oftedal 
rejected a Web-enabled version of SAP because it 
offered fewer features and a different user interface. 

But application integration can also be tricky. 
Bob Garrett, CIO at Cal Farley’s Boys Ranch & Af- 
filiates in Amarillo, Texas, avoided upgrading hun- 
dreds of Pentium PCs when deploying Microsoft 
Corp.’s eEnterprise enterprise resource planning 
application by installing MetaFrame. But “there 
were a lot of fine-tuning issues in getting eEnter- 
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can support large installations. “Scalabili- 
ty is an issue,” says Peter Lowber, an ana- 
lyst at Gartner Inc. in Stamford, Conn. 
“The biggest I’ve seen is 10,000 users.” 

The largest configuration Citrix has 
tested included 250 MetaFrame servers, 
says senior product marketing manager 
Richard Whitehead. 

But Bolz says he’s confident enough of 
Citrix’s scalability on Windows 2000 to 
push ahead. “We're also looking at deploy- 
ing in retail branches. That’s about 30,000 
servers right there,” he says. That would make Wells 


Fargo one of Citrix’s largest customers — a distinc- 


tion that makes Bolz a bit uneasy. With the possible 
exception of Microsoft, most thin-client vendors 
lack experience serving enterprise customers. 

Even Citrix, which Framingham, Mass.-based 
IDC estimates owns about 77% of the Windows 
thin-client market, “doesn’t understand the enter- 
prise model,” Bolz says. “They didn’t understand 
why we would get upset if they didn’t resolve a 
problem in a short period of time,” although that’s 
starting to change, he notes. 


ONLINE EXCLUSIVE: Got Windows and Unix? See how users 
° are deploying Tarantella thin clients, read an 

online Q&A about the future of X Window, and 

review our product feature comparison chart at: 














WELLS FARGO & CO., SAN FRANCISCO 


Big Bank, 
Slim Software 
WHO THEY ARE: A commercial bank 


GOAL: Eliminate branch-office servers and use 
thin-client technology to deliver line-of-business 
applications. 


CHALLENGE: Branches connect via low- 
bandwidth 128K bit/sec. connections. 


STRATEGY: Use Internet Explorer and a plug-in 
from Citrix Systems Inc. to let users connect to a 
MetaFrame front-end intranet Web server. Give 
each user a personalized application Web page 
based on his Active Directory profile. 


COMMENT: Wells Fargo tested Windows 2000 
Terminal Services and Tarantella before settling 
on MetaFrame, which needed a connection of 
about 21K bit/sec. The bank's MetaFrame server 
farm spans data centers in three states. Until the 
release of MetaFrame XP, Citrix server farms were 
limited to a single subnet. Now, if a data center 
goes down, users are automatically rerouted. 


Data centers use rack-mounted Compaq 
Computer Corp. DL360 dual-processor 1U serv- 
er blades (1U equals 1.75 in.) and Cisco 6500 
switches for load balancing. “We find this more 
effective than a four-way or eight-way box,” says 
systems architect John Bolz. “We've architected 
it differently than most, but if a server fails, it’s 
relatively easy to pull that blade out and rebuild 
the server with a scripted install.” 


ISSUES: Retail bank users need both Win- 
dows- and Unix-based applications. Citrix’s 
MetaFrame for Unix would require an additional 
set of server and client licenses. This means 
that Wells Fargo would have to pay for both 
Windows 2000 Server and Citrix Windows 
client access licenses for every user. 

Tarantella gives access to both platforms 
without extra licenses. But “Tarantella wouldn't 
let us use the architecture we put together with 
Terminal Services,” he says. 


PAYOFF: More than 7,000 users now use line- 
of-business applications via MetaFrame. Wells 
Fargo plans to convert all of its retail banking 
group to thin clients. Eliminating branch-office 
servers, desktop-related software, and system 
monitoring and remote control software should 
cut the total cost of ownership by 75%. 


prise to work with Citrix,” he says. 
Another question is whether thin-client vendors 








ABM INDUSTRIES INC., SAN FRANCISCO 
Cleaning Up 
Remote Sites 


WHO THEY ARE: A $1.8 billion provider of jan- 
itorial, air conditioning and security services 


GOAL: Avoid replacing more than 1,700 PCs 
and adding servers in 170 remote offices to 
accommodate the client and server require- 
ments of a new ERP application from J.D. 
Edwards & Co. 


CHALLENGE: The ERP client software couldn't 
run locally without replacing the client hardware 


and operating system. Anthony Lackey, vice pres- 


ident and chief technology officer, also wanted to 
shorten the yearlong process required to update 
all clients with new versions of a custom applica- 
tion that tracks maintenance activity, and he 
wanted to expand access to corporate e-mail. 


STRATEGY: Use thin-client technology; replace 
PCs with Windows terminals; move client appli- 
cations to MetaFrame 1.8; co-locate MetaFrame 
servers at an AT&T Corp. data center, with a 
Comdisco Inc. hot site for emergency fail-over. 


www.computerworld.com/q?a1540 


COMMENT: “We're a very small MIS operation, 
and when you look at having fairly sophisticated 
mission-critical equipment in 170 offices across 
the country, it almost spelled doom,” says Lackey. 


ISSUES: Lackey hopes an upcoming migration 
to Citrix Systems Inc.'s MetaFrame XP, with a 
new universal printer driver, will solve a printer 
compatibility issue, as well as problems with 
MetaFrame’s Resource Management System, 
which manages user activity. Most users have 
one or two applications, but with 40 to 50 appli- 
cations and more than 2,200 concurrent users 
at peak load, “it’s not prepared to handle the 
volume of data we're pumping into it,” says 
Lackey. To solve that problem, he archives the 
data every 30 days. 


PAYOFF: Lackey estimates the cost per user per 
month at $112, vs. $280 for a traditional LAN con- 
figuration. The J.D. Edwards system is still in de- 
velopment, but the technology allowed a rollout of 
Lotus Notes 5.0 to 3,000 users in a single week- 
end. More than 3,000 users can access ERP, 
Notes and other applications from Windows ter- 
minals and desktop PCs. “Our user population has 
gone up 25% in one year because [there’s no] 
barrier of entry to a new user. We just ship them a 
terminal, and they plug it into the wall,” he says. 
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Overview 


Many enterprises are moving away from 
PCs to server-based applications feeding 
thin-client systems. Compared with desk- 
top PC systems, modern thin-client soft- 
ware can reduce equipment maintenance 
and upgrade costs, introduce fewer end- 
user problems and offer better control of 
applications and data. Thin-client systems 
provide fast access to Windows applica- 
tions over low-bandwidth connections. But 
there are drawbacks: You need bigger, 
more sophisticated back-end servers, and 
more users are affected by network out- 
ages. Moreover, thin clients won't do for 
compute-intensive or graphics-intensive 
applications, and there’s no off-line access. 


By Robert L. Mitchell 
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WORLD FOOD PROGRAM, ROME 
Feeding Off 
The System 


WHO THEY ARE: A United Nations 
agency delivering food to underdevel- 
oped areas 


GOAL: Let relief workers in Pakistan 
and other countries access its ERP sys- 
tem in Rome to directly coordinate food 
shipments 


CHALLENGE: The system must work 
in areas with poor connections or over 
VSAT links, and with no local support 


STRATEGY: Install MetaFrame XP on 
Windows 2000 servers in Rome for 
access to an SAP AG system; install a 
browser-based client on thin-client de- 
vices and ship them to remote locations. 


COMMENTS: In places like Islamabad, 
where the World Food Program opened 


~ TECHNOLOGY 


Thintrastructure 


an office in November 2001 to coordinate 
Afghanistan relief efforts, “connectivity is 
a challenge, and support for complex ap- 
plications is difficult to achieve,” says Ole 
Oftedal, acting chief of the systems group 


ISSUES: World Food Program ClO Ken 
Herman likes Citrix Systems Inc.'s Meta- 
Frame enough to deploy 30 Wyse Tech- 
nology Inc. Windows thin terminals at 
headquarters for SAP training, which he 
says cost 75% less than PCs. But the 
600 PCs at headquarters still run the 
standard SAP client. “As CIO, it's not 
clear to me that I'll replace traditional 
desktops, given that you have to scale 
the back end so high,” he says 


PAYOFF: After receiving preconfigured 
thin-client PCs and basic instructions, 
users were able to access the ERP sys- 
tem in Rome. “We got the Pakistan op- 
eration up and running in two hours,” 
says Oftedal. The systems are easily re- 
configured to use a backup VSAT con- 
nection, although latency created some 
connection problems. The World Food 
Program has since rolled out the system 
to 300 users in 29 other countries 
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THIN-CLIENT 
COMPUTING 


CALL IT THIN-CLIENT, Server- 
centric computing or virtual user 
interface software. Products like 
Citrix Systems Inc.’s MetaFrame, 
Microsoft Corp.'s Terminal Ser- 
vices and Tarantella Inc.’s Taran- 


tella Enterprise, traditionally found | 
in corporate settings, send only user interface and 
keystroke data between client and back-end systems. 
Using proprietary protocols, these products offer 
faster access to back-office applications on low- 
bandwidth wide-area networks while reducing infra- 
structure and administration costs. So far, IT depart- 
ments have been reluctant to deploy this 
technology to internal LAN clients or to a 
wider range of applications, but that 
could change as thin-client systems be- 
come more attractive for enterprise use. 
The newest systems make client soft- 
ware a standard browser plug-in, extend- 
ing the hardware that’s supported. On the 
back end, administrators can configure 
the systems to let users access applica- 
tions though an intranet Web page. Thin- 
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client software sports sophisticated load-balancing 


| features to optimize back-end server performance. 
| Server farms can span data centers, allowing unin- 


terrupted computing during a system upgrade or 
a catastrophic failure. Most systems now support 


| Secure Sockets Layer encryption. 


But thin clients don’t fit every situation. They 


| can’t support high-end graphics applications, and 


power users may need their own desktop systems. 
Companies with thin-client systems can save mon- 


| ey by avoiding PC upgrades, but that’s just part of 


potential savings, says Dan Kusnetsky, an analyst at 
IDC in Framingham, Mass. In a typical computing 
implementation, “staffing is 50% to 75% of 
the three-year cost,” he says. Such savings 
can more than off-set increased costs of 
servers and software, Kusnetsky says. 

John Bolz, systems architect at Wells 
Fargo & Co. in San Francisco, agrees but 
says it’s hard to get top management to see 
beyond initial costs: “You can talk [total 
cost of ownership] till the cows come home, 
but the cost of deploying servers appears 
to a lot of eyes as a significant expense.” 


Workers in remote field offices connect 
to the agency’s ERP system using a 
browser-based Citrix thin client that can 
run efficiently over the low-bandwidth 
connections provided by its dial-up ISP or 
satellite services. The system handles 
poor-quality dial-up connections well, 
officials say, but latency issues over 


ROME satellite links have been a problem. 
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Thin Clients for 
‘Tough ‘Times 


Excerpts from a conversation with Steve 
HR Kaplan, a vice president and general manager 
at Houston-based Citrix reseller Vector ESP 
Inc. and co-author of the book Citrix Metaframe for 
Windows Terminal Services: The Official Guide (Mc- 
Graw Hill, 2000). 
Is it time to reconsider thin-client computing for 
its economic benefits? This is the way to deploy Win- 
dows 2000 without touching the PCs. One thing that 
people usually miss is they don’t think about the remote 


offices and how they're going to be able to eliminate the 
infrastructure out there. 


What’s the most common mistake made when 
assessing the business benefits of thin-client 
computing? Putting in this infrastructure but then only 
using it for a couple of applications. If you're going to do 
it, do it for the whole desktop. Sure, you can make ex- 
ceptions, but for the most part, go thin client everywhere 


What’s holding back wider adoption of thin- 
client computing? | think it's people who rise up 
through IT decision-making because of an ability to 
manage perceived risk. And the most scary thing to a 
Ci0 is thousands of users screaming at them. It’s fear 


Is Thin Client 


RECENT IMPROVEMENTS 


in thin-client software Neg CO) BAe) 
CONSIDER 


Enhancements in 
Windows thin-client 
software scalability 


were enough to convince 
Wells Fargo & Co. to buy a 10,000-user 
license for Citrix Systems Inc.’s Meta- 
Frame XP. “We are geographically dis- 
persed, and keeping servers and worksta- . 
tions up to date is becoming a very ex- aa 
pensive proposition,” says John Bolz, vice 
president and systems architect at Wells 
Fargo in San Francisco. 

Ole Oftedal, the World Food Program’s 
acting chief of the systems group, is deploying thin 
clients at more than 300 locations worldwide and 
considers thin-client systems a perfect fit for com- 
plex enterprise applications like SAP. 

“[SAP is] a dirty application, from a systems point 
of view,” It’s tough to maintain and diffi- 
cult to deploy over a wide-area network.” Oftedal 
rejected a Web-enabled version of SAP because it 
offered fewer features and a different user interface. 

But application integration can also be tricky. 
Bob Garrett, CIO at Cal Farley’s Boys Ranch & Af- 
filiates in Amarillo, Texas, avoided upgrading hun- 
dreds of Pentium PCs when deploying Microsoft 
Corp.’s eEnterprise enterprise resource planning 
application by installing MetaFrame. But “there 


he says. “ 
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Enterprise-Ready? 


can support large installations. “Scalabili- 
ty is an issue,” says Peter Lowber, an ana 
lyst at Gartner Inc. in Stamford, Conn. 
“The biggest I’ve seen is 10,000 users.” 

The largest configuration Citrix has 
tested included 250 MetaFrame servers, 
says senior product marketing manager 
Richard Whitehead. 

But Bolz says he’s confident enough of 
Citrix’s scalability on Windows 2000 to 
push ahead. “We're also looking at deploy- 
ing in retail branches. That's about 30,000 
servers right there,” he says. That would make Wells 
Fargo one of Citrix’s largest customers — 
tion that makes Bolz a bit uneasy. With the possible 
exception of Microsoft, most thin-client vendors 
lack experience serving enterprise customers. 

Even Citrix, which Framingham, Mass.-based 
IDC estimates owns pabous 77% of the Windows 
thin-client market, “doesn’t understand the enter- 
prise model,” ‘They didn’t understand 
why we would get upset if they didn’t resolve a 
problem in a short period of time,” although that’s 
starting to change, 


a distinc- 


Bolz says. ° 
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ONLINE EXCLUSIVE: Got Windows and Unix? See how users 


It's job security. 


WELLS FARGO & CO., SAN FRANCISCO 


Big Bank, 
Slim Software 
WHO THEY ARE: A commercial bank 


GOAL: Eliminate branch-office servers and use 
thin-client technology to deliver line-of-business 
applications. 


CHALLENGE: Branches connect via low- 
bandwidth 128K bit/sec. connections 


STRATEGY: Use Internet Explorer and a plug-in 
from Citrix Systems Inc. to let users connect to a 
MetaFrame front-end intranet Web server. Give 
each user a personalized application Web page 
based on his Active Directory profile. 


COMMENT: Wells Fargo tested Windows 2000 
Terminal Services and Tarantella before settling 
on MetaFrame, which needed a connection of 
about 21K bit/sec. The bank's MetaFrame server 
farm spans data centers in three states. Until the 
release of MetaFrame XP, Citrix server farms were 
limited to a single subnet. Now, if a data center 
goes down, users are automatically rerouted. 


were a lot of fine-tuning issues in getting eEnter- 
prise to work with Citrix,” 


he says. 


Another question is whether thin-client vendors 


Data centers use rack-mounted Compaq 
Computer Corp. DL360 dual-processor 1U serv 
er blades (1U equals 1.75 in.) and Cisco 6500 
switches for load balancing. “We find this more 
effective than a four-way or eight-way box,” says 
systems architect John Bolz. “We've architected 
it differently than most, but if a server fails, it's 
relatively easy to pull that blade out and rebuild 
the server with a scripted install.” 


ISSUES: Retail bank users need both Win- 
dows- and Unix-based applications. Citrix's 
MetaFrame for Unix would require an additional 
set of server and client licenses. This means 
that Wells Fargo would have to pay for both 
Windows 2000 Server and Citrix Windows 
client access licenses for every user 

Tarantella gives access to both platforms 
without extra licenses. But “Tarantella wouldn't 
let us use the architecture we put together with 
Terminal Services,” he says 


PAYOFF: More than 7,000 users now use line- 
of-business applications via MetaFrame. Wells 
Fargo plans to convert all of its retail banking 
group to thin clients. Eliminating branch-office 
servers, desktop-related software, and system 
monitoring and remote control software should 
cut the total cost of ownership by 75% 


ABM INDUSTRIES INC., SAN FRANCISCO 
Cleaning Up 
Remote Sites 


WHO THEY ARE: A $1.8 billion provider of jan- 
itorial, air conditioning and security services 


GOAL: Avoid replacing more than 1,700 PCs 
and adding servers in 170 remote offices to 
accommodate the client and server require- 
ments of a new ERP application from J.D 
Edwards & Co 


CHALLENGE: The ERP client software couldn't 
run locally without replacing the client hardware 


and operating system. Anthony Lackey, vice pres- 


ident and chief technology officer, also wanted to 
shorten the yearlong process required to update 
all clients with new versions of a custom applica 
tion that tracks maintenance activity, and he 
wanted to expand access to corporate e-mail. 


STRATEGY: Use thin-client technology; replace 
PCs with Windows terminals; move client appli- 
cations to MetaFrame 1.8; co-locate MetaFrame 
servers at an AT&T Corp. data center, with a 
Comdisco Inc. hot site for emergency fail-over. 


° are deploying Tarantella thin clients, read an 
Quick online Q&A about the future of X Window, and 


review our product feature comparison chart at 
www.computerworld.com/q?a1540 


COMMENT: “We're a very small MIS operation, 
and when you look at having fairly sophisticated 
mission-critical equipment in 170 offices across 
the country, it almost spelled doom,” says Lackey 


ISSUES: Lackey hopes an upcoming migration 
to Citrix Systems Inc.'s MetaFrame XP, with a 
new universa! printer driver, will solve a printer 
compatibility issue, as well as problems with 
MetaFrame’s Resource Management System 
which manages user activity. Most users have 
one or two applications, but with 40 to 50 appli 
cations and more than 2,200 concurrent users 
at peak load, “it's not prepared to handle the 
volume of dn we're pumping into it.” says 
Lackey. To solve that problem, he archives the 
data every 30 days 


PAYOFF: Lackey estimates the cost per user per 
month at $112, vs. $280 for a traditional LAN con- 
figuration. The J.D. Edwards system is still in de- 
velopment, but the technology allowed a rollout of 
Lotus Notes 5.0 to 3,000 users in a single week- 
end. More than 3,000 users can access ERP. 
Notes and other applications from Windows ter- 
minals and desktop PCs. “Our user population has 
gone up 25% in one year because [there’s no] 
barrier of entry to a new user. We just ship them a 
terminal, and they plug it into the wall,” he says. 
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ENS COLDEWEY is an application devel- 
opment troubleshooter. When he comes 
onto a project, it’s usually engulfed in 
trouble. By that point, management is 
often so desperate that it’s willing to try 
almost anything. That’s when Coldewey, 
a Munich, Germany-based independent 
consultant specializing in banking and financial ser- 
vices, turns to Crystal, one of the new agile develop- 
ment methodologies. 

Agile is the label given to a growing number of 
methodologies with names like Scrum, Crystal, Adap- 
tive, Feature-Driven Development and Dynamic Sys- 
tems Development Method (DSDM). These new de- 
velopment approaches are based on the premise that 
if you hire competent developers, presumably they 
know how to write code. Any problems your devel- 
opers encounter, therefore, aren’t coding issues but 
organizational and communications ones, and those 
are what the agile approaches attempt to address. 

Coldewey, for example, once jumped into a project 
that was on the verge of collapse. The team was de- 
veloping 4 complex enterprisewide system at a bank 
and was under extreme pressure to show results fast. 
In keeping with the Crystal approach, Coldewey 
spirited away the development team to a remote site. 
“I told them that the way they work would be up to 
them. We would develop the process together,” he re- 
calls. This alone was a radical departure for the bank. 

Then Coldewey handed out two sets of blank index 
cards, each set a different color. On one set he in- 
structed the developers to write down the things they 
did in the past that speeded up development. On the 
other, they wrote things that slowed them down. 

“In half an hour, we had a lot of cards of both col- 
ors,” he says. 





Continued on page 44 


Extremely Agile 
Programming 


These new programming methodologies are called adaptive because 
they react to changing user cog agile for their frequent iterations and 
continual a and lightweight because they emphasize small teams 
and downplay documentation. By Alan Radding 
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After sorting through the cards, they quickly set up 
a process consisting only of things that sped develop- 
ment while avoiding the things that slowed people 
down. They followed the process they had just set up 
to knock out the first iteration of the system within a 
few weeks and met the deadline. 

“We went through this exercise and made changes 
for every iteration until we had a stable process,” 
which took about three iterations, Coldewey says. 

Although the various agile approaches are differ- 
ent, they have some things in common. They’re in- 
tended to produce software that can be changed 
quickly, and all specify short iterations and maximize 
the amount of time spent face to face. They also fo- 
cus on team morale. “You can’t talk about agile 
methodologies without talking about team morale, 
says Alistair Cockburn, the originator of Crystal. 

The agile approaches differ from extreme pro- 
gramming (XP), although all of them are lightweight 
methodologies. Lightweight methodologies dispense 
with much of the software development process 
overhead that bogs down developers, such as lengthy 
requirements definitions and exten- 
sive documentation. XP, however, 
differs from the agile approaches by 
being much more prescriptive, even 
dogmatic, some might say [Quick- 
Study, Dec. 3]. XP revolves around 12 
practices identified by Kent Beck, 
author of Extreme Programming Ex- 
plained: Embrace Change (Addison 
Wesley Longman Inc., 1999). 

Although XP in various forms has 
been around for several years, cor- 
porate IT is only just beginning to 
consider it. The chief obstacle is that 
some practices prescribed by XP 
contradict long-established IT poli- 
cy. For example, XP specifies pair 
programming, in which two pro- 
grammers sit side by side coding at a 
single workstation. Pair program- 
ming seems blatantly inefficient, but 
a series of studies has confirmed 
that the approach results in fewer 
code defects, which ultimately speeds final delivery. 

“Pair programming is not as productive initially, 
but the design happens on the fly and the quality is 
outstanding. And since we have fewer defects, we’re 
not spending time doing as much bug fixing. So the 
cost issue is moot,” says one application develop- 
ment manager at a major U.S. bank. 

XP also requires the customer for whom the soft- 
ware is being written to take an active, ongoing role 
in the development process — to the extent that the 
customer is asked to write a test to prove a requested 
function before it’s actually coded. In XP, customers 
write desired functions on index cards (one function 
per card). The developers estimate how long it will 
take to code that function. Based on the estimates, 
the customer decides which functions to tackle first. 
Then the customer writes a test, and the developers 
write code to pass the test. This requires a serious 
commitment on the part of the customer, but in re- 
turn, the customer gets exactly what he asked for. 

XP’s approach to requirements alone saves 


yes, if you have: 


will get involved 
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| tremendous effort. “We're talking about a bunch of 
index cards vs. 100-plus-page requirements docu- 
ments,” says the bank manager. The bank turned to 
XP to develop a major enterprise document fulfill- 
ment system. When a bank client opens an account, 
the new system automatically generates all the ap- 
propriate documents and sends them to the client. In 
addition to the document fulfillment system, the 
bank has about 10 applications or reusable compo- 

|} nents built using XP techniques. 

XP isn’t perfect, however, and the bank has looked 
at other agile approaches. “XP doesn’t address de- 
ployment,” says the bank manager. So now he’s look- 
ing at DSDM, “which has some life-cycle project 
management,” he notes. 


Lightweight Programming for Heavyweights 
Lante Corp., a Chicago-based consulting company, 
recently held a conference on XP for its corporate 
clients in hopes of speeding its acceptance. To make 
XP more palatable to corporate managers, Lante has 
teamed with Beck to create what they’re calling a 





Peale 


Agile or 
NBnag xile? 


Is your organization a 5 candidate 
for using one of the agile programming 
methodologies? The answer may be 


@ Uncertain or volatile requirements 
w Responsible and motivated developers 
w Acustomer who understands and 


On the other hand, more traditional, 
predictive approaches are indicated 
if your project involves: 


@ More than 50 developers 
w A fixed-price or fixed-scope contract 


one-team approach, explains David Trowbridge, 
Lante’s director of technology. The 
one-team approach combines an 
XP development effort with an ROI 
team that analyzes the business 
and ranks project requirements on 
the basis of return on investment. 

Lightweight methodologies have 
been adopted primarily by inde- 
pendent software vendors and In- 
ternet start-ups that don’t have an 
entrenched development process. 
These approaches work best on 
projects where requirements 
change quickly and frequently or 
aren’t fully apparent at the start. 

Lante, which offers a range of de- 
velopment approaches, from tradi- 
tional to agile, only recently found 
a major corporate client willing to 
try XP. 

Similarly, Jim Highsmith, creator 
of Adaptive, an agile methodology, 
has started to work with a major 
pharmaceutical company. “They are kicking the tires. 
A few companies are using it on Internet projects, 
but it represents a big change for corporate IT,” 
Highsmith notes. 

A move to agile programming, in fact, strikes the 
most sensitive of nerves: honest communication. For 
years, corporate IT and users have worked separate- 
ly. Lightweight methodologies bring everyone to- 
gether face to face and keep them there. 

“Now they have to be honest,” says Beck, who set 
| up the showcase corporate XP project at the auto- 
maker Chrysler several years ago. “No more padding 
requirements or inflating estimates.” In exchange for 
honesty, organizations get functionality they need 
fast. To managers, it’s a welcome trade-off. D 


Radding is a freelance writer in Newton, Mass. 
Thinking about using one of the agile methodologies? 
Check out some tips available on our Web site from 


ue Martin Fowler's “The New Methodology.” 


L www.computerworld.com/q?25493 
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Agile _ 


For more on agile programming in general, see the 
Agile Manifesto at www.agilealliance.com and 
“The New Methodology” by Martin Fowler, 
at www.martinfowler.com/articles/ 
newMethodology.html. 


Extreme Programming 

Built around 12 basic practices ranging from pair 
programming to frequent refactoring, this approach is more 
prescriptive than the others. For more information, visit www. 
extremeprogramming.org and www.xprogramming.com or 
read Extreme Programming Explained: Embrace Change, by 
Kent Beck (Addison Wesley Longman Inc., 1999). 


* 
Scrum 
Based on the empirical process control model, Scrum 
programming relies on self-directed teams and dispenses 
with much advanced planning, task definition and manage- 
ment reporting. To earn more, visit www.controlchaos.com 


or read Agile Software Development with Scrum, by Ken 
Schwaber and Mike Beedle (Prentice Hall PTR, 2001). 


Crystal 

This approach empowers the team to define the development 
process and refine it in subsequent iterations until it's stable. 
To learn more, visit http;//crystalmethodologies.org/ or read 
Agile Software Development: Software Through People, by 
Alistair Cockburn (Addison Wesley Longman, 2001). 


Adaptive 

Based on adaptive rather than deterministic theories, this 
approach offers a series of frameworks to apply adaptive 
principles and encourage collaboration. For more 
information, visit www.adaptivesd.ccin or read Adaptive 
Software Development: A Collaborative Approach to 
Managing Complex Systems, by James A. Highsmith til 
(Dorset House Publishing, 2000). 


Feature-Driven Development 


This model-driven, short-iteration process is built around the 
feature, a unit of work that has meaning for the client and 
developer and is small enough to be completed quickly. To 
learn more, read Java Modeling Color With UML: Enterprise 
Components and Process (with CD-ROM), by Peter Coad, 
Eric Lefebvre and Jeff De Luca (Prentice Hall PTR, 1999). 


amic Systems fa 
Devcon Method 


Conceived as a methodology for rapid application 
development, DSDM relies on a set of principles that include 
empowered teams, frequent deliverables, incremental 
development and integrated testing. For more information, 
visit www.dsdm.org or read DSDM: The Method in Practice, 
by Jennifer Stapleton (Addison Wesley Longman, 1997). 
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BY SHARON MACHLIS 
REENLAND native 
Rasmus 
was tired of writ- 
ing the same code 
over and 
while creating his personal 
home page back in 1995. 

So, he says, he wrote “a very 
simple parser” to replace tags 
in an HTML file with some 
code he’d written in C. 

That project evolved into 
PHP, an open-source scripting 
language now installed at more 
than one in every five Web do- 
mains, according to an October 
2001 survey of more than 6 mil- 
lion domains conducted by 
Netcraft, a Bath, England-based 
Internet consulting company. 

PHP fans say the language is 
exceptionally easy to learn. It 


over 


has a lot of built-in functions | 


such as simple connections to 
databases and support for the 
Lightweight Directory Access 
Protocol (LDAP). 


“PHP was developed from | 


the ground up to be a Web plat- 
form,” 


Lerdorf 


| 
| 





says Zeev Suraski, chief | 


technical officer at Zend Tech- | 
nologies Ltd. in Israel and an | ( 


author of the current version 
of PHP. “Very powerful appli- 
cations can be created in a very 
short time. ... This is the No. 1 
feedback I get from people.” 
PHP 


server to another with minimal 


or no rewrites. This multiplat- 


form support appeals to IT 
managers who don’t want to be 
locked into a single brand. 


Free and Easy 
As open-source software, 
PHP is free for corporate use 


and works well with other pop- 


ular open-source projects, in- 
cluding the Apache Web serv- 


er and the MySQL and Post- 


greSQL databases. 

“If we didn’t have PHP, it 
would cost us six to seven 
times as much to operate [our] 
IT environment,” says Kevin 
Crothers, head of corporate 


code is highly portable; | | 
it moves from one brand of 








TECHNOLOGY QUICK 


HOT TRENDS & TECHNOLOGIES IN BRIEF 


DEFINITION 


PHP is an open-source, server-side scripting 
language designed for creating dynamic Web 
applications. Originally an acronym for Per- 
sonal Home Page, PHP now stands for PHP: 
Hypertext Preprocessor — a change made 
after the scripting language evolved far beyond 
its home-page-creating origins. 


Web systems at 
Inc. WorldCom has used PHP 
for several major Web projects, 
both internal and external, in- 
cluding the front end to a 
searchable database of em- 
ployees and contractors that 
contains more than 100,000 
records. “It’s all LDAP-based,” 
he says, noting that PHP had 


“the strongest LDAP integra- | 


tion we’ve been able to find.” 
PHP uses server resources 

efficiently, Crothers says. It 

uses memory sparingly and al- 


<? mail(Stomail, “User 
Comments”, Scomments, 
“From: $frommail\n\n”); 2 


Above is an example of simple PHP code for e-mailing data en- 

tered into an HTML form, where the form has fields called comments 
(for comments entered by a user) and frommail (for a user-entered e-mail 
address), as well as a hidden field tomail (for the address where informa- 
tion should be sent). The e-mail would be sent with the subject line “User 


Comments.” 


In a production environment, additional code would be added for 


validation and security. 


lows client-side interpretation 
of code to shoulder some pro- 
cessing burden. 

“There’s money in your 
pocket right there,” he says, be- 
cause a PHP-based application 
requires less server hardware 
than some other environments. 
Crothers adds that he has 





WorldCom | found PHP to be both stable 


and secure, and he believes that 
the language is very easy to 
learn compared with compet- 
ing technologies such as Micro- 
soft Corp.’s Active Server Pages 
(ASP) technology for dynamic 
Web applications. 


Room for Improvement 


However, many developers 


er for nonprogranimers than 


ial ieitinmnenttict inertia 





coding in PHP, Suraski notes. 

At present, there are 
high-level commercial WYSI- 
WYG Web authoring tools that 
automatically generate PHP 
pages, which means you need 
actual programming knowl- 
edge. That doesn’t appeal to 
every Web development shop, 


| very large-scale 
generate ASP code from soft- | 
ware such as Microsoft’s Visu- | 
al InterDev, which can be easi- 





| also see some 
| build [Simple Object Access 


| cations 
no } 





but Suraski says he believes 
some PHP authoring tools wi! 
be out later this year. 

He also acknowledges that 
PHP's object-oriented program- 
ming capability, compared with 
that of Java, for example, “is 
not as powerful as it should 
be.” This can make PHP a bit 
more cumbersome for creating 
applications. 
However, improvements are in 
the works for PHP Version 5.0, 
he said, which is due sometime 
in the second quarter. 

Lerdorf says other upcoming 
improvements include making 
PHP Extension and Applica- 


tion Repository (PEAR) more 


useful. PEAR solves some 
Web-related problems but isn’t 
part of PHP itself. “You will 
nice ways to 


Protocol/Web Services De- 


| | scription Language] services 
with PHP,” he says. 


PHP is an interpreted lan- 
guage and doesn’t use com- 
piled binary executables, so 


| PHP applications can be more 
| easily viewed and dissected by 
competitors, says Crothers. For 


hiding code or creating appli- 
for resale, products 
such as Zend’s Encoder will 
mask some work. 

For professional-level quality 
assurance and testing, Crothers 
advocates using a product such 
as Komodo from Vancouver, 
British Columbia-based Active- 
State Corp. Komodo’s integrat- 


@ Are there technologies or issues you would like to learn about in QuickStudy? Please send your ideas to quickstudy@computerworld.com. 
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PHP or Perl? 


Perl has been a popular lan- 
guage for developing Web ap- 
plications. But is it better than 
PHP for creating dynamic Web 
applications? Opinion is split 
among programmers. 

Many who like to get under 
the hood and have a great deal 
of control favor Perl. And as a 
general-purpose language, 
Perl has more capabilities and 
a more robust debugging envi- 
ronment than PHP. 

In Perl, many Web tasks re- 
quire add-on modules, where- 
as PHP uses built-in functions. 
Some see this as a disadvan- 
tage, while others say it lets 
programmers pick the best im- 
plementation for a given task. 

Peri’s power and flexibility 
can make it more difficult to 
learn and use. “You can’t do as 
much with PHP, but those re- 
strictions allow novices to pick 
up PHP more quickly than Perl, 
because there are fewer ways 
to go wrong,” says Jon Orwant, 
editor of The Perl Journal. 

Many programmers use 
both. “I personally use a com- 
bination of PHP and Perl for 
many of my projects: Perl 
mostly for back-end tasks, 
while | have PHP doing all the 
front-end work,” says PHP in- 
ventor Rasmus Lerforf. “You 
could do the front end in Perl, 
but it would be a bit more 
work.” 

~- Sharon Machlis 


ed development environment 
is available free to individuals 
and nonprofit organizations. 
Ultimately, Crothers 
PHP is an excellent environ- 
ment for creating Web applica- 
tions for WorldCom. “It does 
everything,” he says. D 
www.computerworld. 


ick 
com/q?24785 


For PHP resources on the Web, see 
www.computerworld.com/q?a1530 


says, 


To read an interview 
with Lerdorf, visit 
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TECHNOLOGY 
Getting Security Priorities 
Straight in the 





Router security holes, virus vulnerabilities and 
smart cards hit the front burner as 2002 begins 





BY VINCE TUESDAY 
UR OFFICE IS usually quiet 
this time of year. Our 
financial year-end isn’t 
sorted out until the end of 
January, but once that 

rush is out of the way, we enjoy a peace- 

ful few weeks planning for the next year. 

I know that regardless of the plans I 
make, Ill have to react to changes in 
my company and to wider events in in- 
formation But 

without an idea of what I 

hope to achieve, I know I’ll 

spend my year bouncing 

from emergency to emer- 

gency. 

I can’t avoid emergen- 

cies, but there are some 

improvements I can make 

to our policies and meth- 

ods to reduce our risk of 


security. 


being hit by severe crises. 

I expect routers to be- 
come a large area of con- 
cern this year. The CERT 
Coordination Center in 
Pittsburgh, which isn’t 
the fastest off the block 
with warnings these days, 
has released notifications 
about routers being used for attacks. 


We already use the access control | 


lists (ACL) within our routers to apply 


logical access control, a sort of cheap | 


and cheerful firewall setup for internal 
segregation. We have several hundred 
routers of various sorts and many net- 
work staffers who can access them. This 
complicates the management of ACLs, 
particularly configuration changes. 


We'll be looking at Mountain View, | 


Calif.-based Solsoft Inc.’s Solsoft NP 
product to help in the management of 
all of our ACLs. Although we have 
integrity-checking on our Windows 
and Sun Solaris systems, we will con- 
sider installing Portland, Ore.-based 
Tripwire Inc.’s Tripwire for Routers 
and Switches to identify unauthorized 
changes to the configuration of those 
systems. 


§ This week's journal is written by a real security manager. 


| 
| 
| 


SECURITY 
MANAGER'S 
JOURNAL 


| stopped promoting the year of public- 





Another project that will keep us 
busy between incidents is a major 
upgrade of our intrusion-detection sys- 
tems (IDS). The network IDS will be 
the easy part. Our vendor, Atlanta- 
based Internet Security Systems Inc., 
has added a whole new architecture to 
its latest version. We will build and 
deploy new central servers and under- 
go new training — and a whole new 
learning curve. 

Every plan or budget 
should have a “blue sky” 
project that will almost cer- 
tainly get discarded in the 
prioritization process, but I 
include mine to show that 
we are thinking ahead and 
have an eye toward the fu- 
ture. (I also hope that cut- 
ting my blue-sky project 
will save me from having to 
cut more necessary proj- 
ects.) 


Bypassing Biometrics 

Some people claim that 
2002 will be the year of bio- 
metrics. However, they said 
that about 2001 and just 
about every year since they 


key infrastructure. We won't be doing 
anything with biometrics. I’ve heard 
too many horror stories. 

My current favorite, from another 
company, is a rollout to a trading floor 
on which a pair of identical twins 
worked. Apparently, the system was un- 


| able to identify any difference in their 


fingerprints. I came up with a few ideas 
to help them: Brand the company logo 
on one twin’s thumb, or scar their 
thumbs with acid. But these were reject- 
ed, and an exemption to the biometrics 
policy was made for those two people. 
Rather than biometrics, my mad idea 


is to launch new cards for all staff mem- | 


bers. The cards will combine swipe- 
card access to the offices, cashless 
vending for the canteen and snack ma- 
chines, and log-in capability for desk- 





New Year 


tops. If a staffer removes his card froma 
desktop, the machine will be locked so 
it can’t be used while he gets food or 
visits the washroom. 

We can eliminate the costs of pass- 
word resets and the risk of weak pass- 
word security. We have yet to crack 
how to make this work for remote ac- 
cess, but I’m sure we can find a suitable 
solution. 

We’ve sounded out the physical secu- 
rity teams, and they support the idea, 
but it'll be expensive and hard to get the 
cards working across all our systems. I 
expect that the project will be canned at 
the blueprint stage. Eventually, howev- 
er, the time will be right, and laying the 
groundwork will have been worthwhile. 


Year of the Worm 

2001 was the year of the worm with 
some highly virulent examples. We 
avoided infection because we had pro- 
tective measures in place and because 
we were lucky. 

We can’t count on being lucky forev- 
er, so we'll have to be more careful. 
And the threat keeps growing. The re- 
cent bug in the Unix log-in command 


will no doubt soon be rolled into an au- | 


tomated attack. Since Linux and Unix 
haven’t historically suffered from virus 
infections, few machines are protected 
with antivirus updates, leaving them 
open to become reservoirs of infection 
that can launch probes onto other ma- 
chines. I'll have to look into deploying 
antivirus protection onto our Solaris 
servers this year. 


I’ve also got a nagging concern about | 


Secure Sockets Layer (SSL) access to 
Web sites. We encourage SSL use be- 
cause it protects staff information from 
being intercepted or tampered with in 
transit on the Internet. However, using 
SSL means that as data is encrypted, 
our proxy servers can’t scan the down- 
loads for viruses, leaving us reliant on 
desktop protection. It’s very hard to 
ensure that all desktops are updated in 
a timely fashion. Before we had effec- 
tive gateway protection from the 
worms, we had outbreaks despite desk- 
top cover. 

One new virus takes the biological 
metaphor even further by using evolu- 
tion to update its attack methods. Once 
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LINKS: 


www.cert.org/archive/pdf/DoS_ 
trends. pdf. Every security manager 
should read this CERT report, published 
in October, about the risks of routers 
and denial-of-service attacks. 


www3.ca.com/solutions/ 
collateral.asp?CT=65&1D=1137. 
Here's the skinny from Islandia, N.Y.- 
based Computer Associates Interna- 
tional Inc. on the evolutionary Win32.- 
Hybris virus, which uses newsgroups 
to spread. 


http://xforce.iss.net/alerts/ 
advise105.php: Read this alert from 
Atlanta-based Internet Security Sys- 
tems Inc. to learn about a serious 
buffer-overflow vulnerability in the log- 
in program used by Solaris and other 
operating systems based on Unix Sys V. 


www.solsoft.com/: This site includes 
information on the Solsoft NP security 
policy manager I'm evaluating. 


www. tripwire.com/. \'m considering 
using Tripwire for Routers and Switch- 
es to monitor our routers, but Tripwire 
also offers a version that works for 
servers, as well as an open-source 
Linux edition. 


the virus infects a certain number of 
machines, it posts the method it used 
as a chunk of code to a newsgroup. 
Other copies of the virus read the 
newsgroup automatically and start us- 
ing the methods that are most com- 
monly posted to improve the program’s 
ability to spread. 

Not only can the virus writers update 
their code once it’s out there, but just as 
in the biological world, those viruses 
that survive attempts to destroy them 
will pass on their methods to other 
copies. I expect we'll see a lot more of 
this in the next 12 months. 

I expect that 2002 will include more 
— and more severe — information se- 
curity incidents across all companies. 
Although I hope we won’t be as badly 
hit as those who haven’t taken reason- 
able precautions, I still don’t feel se- 
cure. What have I missed? What are 
your plans and predictions for the rest 
of the year? Let me know in the Security 
Manager’s Journal Forum. D 


C 


Discuss this week's column and 
catch up on the latest security 
developments online at: 
www.computerworid.com/q?q2000 


." Vince Tuesday,” whose name and employer have been disguised for obvious reasons. Contact him at vince.tuesday@hushmail.com or go to the Security Manager's Journal forum. 





You won't see the next network 
security threat coming. 


; But STAT willl. 
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a Arming yourself against the next threat requires more than vigilance. It requires a new level of defense. 
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At Harris, we know; for more than 25 years, we've helped keep government networks secure —and 


STAT now we're helping businesses stay ahead of the enemy with our STAT intrusion prevention tools. For 
> 


example, STAT Neutralizer” proactively protects servers and workstations by using behavioral 


When the next Code Red, Goner 


or Nimda comes along, STAT analysis to prevent intrusions and malicious activities from taking place. STAT Neutralizer provides a new 
Cc c ioc , 


> the differenc ee P oe 
could be the difference between layer of security to defend your network during its most vulnerable time — before an anti-virus 


a crippled system and one that’s 
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Search Tool Delivers 
Relevant Answers. 


Accuracy and ease of use distinguish 
Atomica’s “Answer Delivery search engine 


BY MARK HALL 
LITTLE-remarked- 
upon consequence 
of the and 
Drug Administra- 


Food 


tion’s acceleration | 
of the process for approving | 


drugs has been that medical 
dictionaries quickly become 
outdated. This has forced many 
scientific and 
searchers to rely on the Web 
for the latest information. 

But the problem with the 
Web, according to Bruce Ma- 
liken, internal support supervi- 
sor at Silver Spring, Md.-based 
Social & Scientific Systems 
is that most search en- 
gines give users too much un- 
necessary information to sort 
through. 

rhat’s why his other 
organizations have embraced 
search technology from Atom- 
a 60-person start-up 


Inc., 


and 


ica Corp., 
in Burlingame, Calif. 

Maliken describes Atomica’s 
Answer software as 
search engine” 
that lets users at his 285-person 
consultancy search the Web as 
documents 


Delivery 


“an assisted 


well as in-house 


and resources. 


Selling Simplicity 
The key to the 
success, say Maliken and oth- 
ers, is that it’s simple to use. 
Founded in 1999 as GuruNet, 
with a product by the same 
name that only on 
Web content, the company re- 
vised its Web-only approach in 
late 2000, adding enterprise- 
specific tools and renaming it- 
self. What the company didn’t 
change was its emphasis on 


software's 


focused 


ease of use. 

“Most people who need in- 
formation are not power users 
of enterprise software like 
Siebel or SAP,” explains Bob 
Rosenschein, Atomica’s chair- 
man, founder and CEO. 


medical re- 


The company currently ships 
Atomica Enterprise and Atom- | 


ica for Lotus Discovery Server. 
But it has gone a step further 


by offering subject-area search 
tools, which provide for more | 


targeted and predefined infor- 
mation sources. 


The first product, Atomica | 


Most people 
who need 
information are 
not power users 
of enterprise 
software like 
Siebel or SAP. 
BOB ROSENSCHEIN, 


FOUNDER, CHAIRMAN AND CEO, 
ATOMICA CORP. 


Atomica Corp. 


1409 Chapin Ave. 
Burlingame, Calif. 94010 
(650) 425-1000 


Niche: Information retrieval sys- 
tems for enterprise and Web- 
based resources and repositories 


Company officers: 
* Bob Rosenschein, founder, 
chairman and CEO 


| Enterprise for Sales and Mar- | 
| keting, has templates to help | 

users gather information in ar- | 
| eas such as product develop- | 
| a costly thing 
| such automation is done, 


| ment and competitive analysis. 

The U.S. Geological Survey 
(USGS) has been working with 
Atomica Enterprise, preparing 
| to roll it out to its offices in all 
50 states. 


shire, senior adviser for strate- 


gic planning at the agency’s | 
| of automation without invest- 
| ing in a full-scale portal. With 


headquarters in Reston, Va., 


| Mike Spangl, president and chief 
operating officer 

Mark Matossian, vice president 
of finance and administration 

e Jeff Schneiderman, vice presi- 
dent of engineering 


Milestones: 

e January 1999: Company founded 
as GuruNet 

¢ November 2000: Name changed 
to Atomica. 

March 2001: Atomica Pro ships. 
August 2001: Atomica Answer 
Delivery System for Enterprise 
ships. 

* October 2001: Atomica Answer 
Delivery System for Lotus Discov- 
ery ships. 


Burn money: $32 million from 
venture capitalists and 
private investors, in- °& 
cluding Flatiron Part- . 
ners, Garage Tech- Cc c Me 
nology Ventures and O] 

John Scully. mpi 


Products/pricing: 

Enterprise implementation 

is $100,000, plus $250 per user 
per year. 


Customers: USGS: Social & 
Scientific Systems; Foxboro 
School District, Foxboro, Mass. 


Red flags for IT: 

¢ Atomica’s systems aren't as 
powerful as a search portal. 

* The systems lack some adminis- 
trative tools 

* Atomica’s systems don't allow 
for compound-word search capa- 
bilities. 





According to Denise Wilt- | 
| ering using Atomica’s tools so 


oMPUTER 


Ting 


| works 


tocol 
users can access only internal | 
| focused on business. The product 

| needs to build in more scientific domain 


| the prototype work done so far 
| has been promising. 


The USGS has a lot of data in 
its offices that needs to be 
readily available to its internal 
users as well as to its customers 
in education, government and 
| other industries, she says. 

Wiltshire explains that build- 
ing a unified portal “to synthe- 
size and integrate everything is 
to do.” Yet once 
the 
cost benefits are there to be 
reaped, she says. 


Automation Benefits 


Wiltshire says she’s consid- 


the USGS can get the benefits 


Atomica, she says, her users 


| have found they have “the ca- 
| pability to reach down into sci- 
| entific data, text, bibliographic 


data and synthesize it and cus- 
tomize it for our audiences.” 
Atomica’s software is al- 


| ready paying off for Social & 


Scientific Systems. “It’s made 


| my users more productive, 
Maliken says. Worker produc- | 
| tivity is a priority for the com- 
| pany — so much so that IT has | 
| someone working nearly full- 
| time just to eliminate spam, 


which wastes employee time, 


| he explains. The Atomica tech- 
| nology 


has_ helped 
performance, he says. 
That’s because it’s fast and 
easy to use. The search bar 
floats on the screen no 
‘ matter what application 
%  auser is in, and it grabs 
information from the 
Internet without load- 
Nige ing advertisements that 
“ can distract users and 
slow response time. 
Atomica’s software also 
with standard Light- 
weight Directory Access Pro- 
directory services so 


data sources for which they 


| have set permissions. 
| Both Maliken and Wiltshire | 
| offer their kudos to Atomica’s | 


staffers. “They’re extremely re- 
sponsive to needs and ideas,” 
says Maliken. 

Wiltshire says the start-up’s 


| small size works to its advan- 
| tage. 


“They’re nimble and 


jazzed,” she says. D 
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the buzz 
STATE OF 
THE MARKET 


|What’sina 


Name? 


Cute names are the normin the search 
technology market. GuruNet morphed 
into Atomica, and PurpleYogi, the com- 
pany's Mountain View, Calif.-based 
competitor, relaunched itself as Stratify 
Inc. a few years ago. 

Fortunately, the software from these 
companies is better than cute, accord- 
ing to Kyle Johnson, an analyst at Cam- 
bridge, Mass.-based consultancy For- 
rester Research Inc. 

Good technology, however, won't 
necessarily get noticed in a market with 
overlapping competitors. Johnson 
points out that Atomica not only directly 
competes with Stratify, but the company 
also has to deal with portal players such 
as Plumtree Software Inc. and E.piph- 
any Inc. as well as search engine pro- 
viders such as Autonomy Corp. in Cam- 
bridge, England, and Inktomi Corp. in 
Foster City, Calif. 

“Still,” he says, “they're an interesting 
alternative to portals.” 

Atomica is more interesting when it 
comes to price. Johnson estimates that 


| anenterprise installation of Atomica’s 


software runs about $100,000, while 


| San Mateo, Calif.-based E.phiphany’s 
improve | 


portal generally costs $150,000 and 
San Francisco-based Plumtree’s soft- 


| ware averages $230,000. 


Shortfalls 


Johnson says that despite the com- 
plexity and cost differences, portals do 
far more for companies than Atomica 


| can. For example, he says, Atomica’s 


software has fewer administrative tools 
and fewer development opportunities to 
integrate it with other applications. 

Even bullish users want more from 
Atomica. Social & Scientific Software's 
Bruce Maliken, who raves about the 
product, says it does a poor job handling 
compound-word searches and it’s too 


expertise, he says 
Atomica CEO Bob Rosenschein says 
the search software will acquire more 


| features in time. He argues that ease of 


use and the ability to search both Inter- 
net-based and company-housed infor- 
mation sources are the most important 
features to get right first. 

~ Mark Hall 





DIRECTIONS2002 ... 
Oa ULLAL fa 


The rebound is coming. It always does, And while it's easy to focus on 
the “when” of the rebound, the real-question.should be “what then?” 
After the IT recession of 2001.we can expect new user buying 
behavior, new channel requirements and new vendor success factors. 


Attend IDC's Directions and learn about the timing and strength of the 
rebound, the shape of the new industry it will leave in its wake, and the 
new strategy for leadership it will demand of suppliers. 


Featured topics include: 

* Competing in the age of bioscience 

* Global software ina changed world 

*- Life beyond the PC: How to succeed in the device market 
‘ ¢ Delivering the promise of broadband networks 

_ © Disaster prevention, preparedness, and recovery services 
¢ IP telephony 

¢ Effective indirect sales strategies 

e Web services 

* Interactive consumer services 

* Infrastructure and services to enable the wireless enterprise 


... and much more! 


To view a complete list of topics, please go to 
www.idc.com/events 





March 20, 2002 
Boston, Massachusetts 


April 3, 2002 
FTA) Jose, California 


SPECIAL OFFER! 


Register by February 20 and 
receive a $200 discount off 
the conference fee. 


Register Online Now 
www.idc.com/Directions02/Boston 
or 
www.idc.com/Directions02/SanJose 


or Call 
800.605.5849 
(978.597.0133 outside the US) 
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Analyze the Future 


Co-sponsored by: 


ae) 





CONSTRUCTIVE 
DISRUPTION 


CTO: AGENT for CHANGE 


April 8-10, 2002 


The Westin 
St. Francis Hotel 


San Francisco, CA 


The challenges of the CTO are unlike anyone else’s. You're the one that everyone comes to 
for answers, solutions, predictions and miracles. As the miracle worker of your enterprise, 
it is your job to decipher what works and what doesn't. 


Now in its 3rd year, this invitation-only conference brings together an exclusive crowd of 
people, like you, who are driving the use of disruptive technologies to transform business 
processes and define the next wave of innovation. 


Join 250 other CTOs for 2'/2 days of networking, keynotes, panels, practical discussions, 
and working sessions. Share ideas and swap stories about the day-to-day challenges that 


Dr. John Seely Brown 
Chief Scientist, Xerox Palo Alto Research Center 


K. Eric Drexler 
Chairman, The Foresight Institute 


Patrick Gelsinger 
VP & CTO, Intel 


Norman Lorentz 
CTO, U.S. Federal Government 


Irving Wiadawsky-Berger 
VP of Technology Strategy, IBM 


Kent Beck 

Director, Three Rivers Institute 

Marc Benioff 

Chairman & Founder, salesforce.com 
John Blair 

Co-founder, President, & CEO, Kenamea 
Tim Bray 

Founder & CTO, Antarti.ca Systems 
Barry Briggs 

CTO, Wheelhouse 

Tim Howes, Ph. D. 

CTO, Executive VP of Loudcloud 
Development, & Co-Founder, Loudcloud 
Sheldon Laube 

CEO, Centerbeam 

Dr. Henry McDonald 

Director, NASA Ames Research Center 
Dawn Meyerriecks 

CTO, DISA 

Mike Ragunas 

CTO, Staples.com 

Curtis Robb 

Senior VP & CTO, Delta Technology, 
Delta Airlines 

Gene Rogers 

CTO, Boeing 

Rick Hayes-Roth 

CTO, Software Solutions, Hewlett-Packard 
Dr. Eric Schmidt 

Chairman & CEO, Google 


Andrew Wolfe 
CTO, SONICBlue 


CTOs face at the only event created by CTOs for CTOs. 


THE ROLE OF THE CTO IN ToDAy’s ECONOMY 

DisRUPTIVE TECHNOLOGIES: FROM ANNOYANCE TO RELIANCE 

EXTREME PROGRAMMING 

GriD COMPUTING 

WIRELESS INFRASTRUCTURE ISSUES 

A Look INSIDE THE LABS 

SOFTWARE AS A SERVICE 

DisAsTER RECOVERY BEST PRACTICES 

MARRIAGE OF BUSINESS AND TECHNOLOGY: CRITICAL SKILLS FOR CTOs 
BUSINESS CONTINUITY BEST PRACTICES 

IT PROJECT MANAGEMENT AND PRIORITY-SETTING IN TODAY's ECONOMY 
Next GENERATION SYSTEMS MANAGEMENT 


Monpay, Aprit 8, 2002. Pac Bett PARK TECHNOLOGY TOUR 
Be r guest for a behinad-th t sy t Pac Bell Park. + 


he tour will be ducted by the SF Giants CIO and a senior IS department 


WEDNESDAY, Aprit 10,2002 SF Giants vs. LA Dopcers BASEBALL GAME 


Be eS Fra Giar ake on the LA Dodgers at Pac Bell Park in San Franc 


* Attendance to these events is available on a first-come first-served basis. Space is limited. 


Request your invitation now! 
Go to http://ctoforum.infoworld.com/RF19 


PRODUCED 


Contributing Sponsor 


BY 


Ips InfoWorld 


CONFERENCES 


For more information, contact: 866-292-5805 


For sponsorship information, contact: ctosponsor@infoworld.com | For speaker opportunities, contact: ctospeakers@infoworld.com 
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Call 1-800-227-8365 x7540 
om aaE TMU Eeli 


John_kim@infoworld.com 


www.diskdupe.com 


Cleveland, OH 
1.800.551.3475 


DISKCOPY 


softwareiuplication. 


REE GROUND 
SHIPPING WITH 
yO OUR 4st ORDER 


¢ CD-ROM / DVD Replication 

¢ CD-R / DVD-R Duplication 

¢ CD-R / DVD-R Screen Printing 
¢ Diskette Duplication 

¢ Custom Labeling / Packaging 
¢ Fulfillment & Distribution 


To quote your next project, call or e-mail; 


1.800.551.3475 * sales@diskdupe.com 


Phoenix, AZ 
1.800.645.9490 


DISKCOPY Duplication Services, Inc. 


Computerworld « 


www.AVPartner.com/iworld 


YOU CAN'T SELL 
without getting their 


attention! 
PHILIPS =~=—S Only 


7 ‘2495 


> Philips cSmart 

6000 Hour Lamp Life! 
Features 1000 Lumens of brightness 
SVGA and 7.9 pounds 


Only 
InFocus ~ 32995" 


> InFocus LP1 as VS 
*Refurbished Units S 
Save $500.00 
XGA Resolution 


1100 Lumens of brightness 
aE are | Projector Depot | 


A Global imaging Systems Company 


Professional Projectors 
Purchase « Rent + Lease 


877.619.2264 


February 4, 2002 








B stock 


Proxima DX2 
XGA ¢ 1000 Lumens ¢ 5 Ibs. 
DLP Technology 


$1,995 


new 


Viewsonic PJ1060 
XGA © 2200 Lumens ° 13.2 Ibs. 
3 Year Warranty 


$3,495 


new @ ag 
Sanyo PLC-XW20/PLC-XU35 


XW20 XGA ¢ 1100 Lumens ¢ 5.7 Ibs. 
XU35 © XGA © 2000 Lumens ° 8.6 Ibs. 


PLC-xw20 $2,995 
PLC-XU35 $3,995 


OU hel 


EY Lh er 


e 
yer any roo 
pte ee eet 


projection fo 


new =. cae 
Epson PowerLite 703 


OH) 0" 


Sanyo PLC-XP40/PLC-XP45 
XP40 ¢ XGA ¢ 2600 Lumens ¢ 17.4 Ibs. 
XP45 © XGA ¢ 3500 Lumens ¢ 18.5 Ibs. 

xP40 $4,995 
xP45 $6,495 


i 


Proxima DP9280 
XGA © 3000 Lumens ¢ 20.3 Ibs. 
Lens shift, power zoom/focus 


$3,569 


Proxima UltraLight X350 
XGA © 1100 Lumens ¢ 4.2 lbs. 


$2,795 


new Zo 


Mitsubishi X70UX 
XGA ¢ 1100 Lumens ¢7 Ibs. 
$4,995 3 Year Warranty 


$2,695 


ADTECH 


Empower your presentations 


CALL 800-419-0023 





XGA * 1000 Lumens ¢ 5.8 Ibs. 


p stock eS 


Proxima DP6850+ 
XGA ¢ 1800 Lumens ¢ 13.2 Ibs. 


$2,995 


ati _— 8 sto ck 


InFocus LP350 
XGA ¢ 1300 Lumens ¢ 6.7 Ibs. 


$2,795 


sey 
Toshiba TLP-670 
XGA 1300 Lumens ¢ 8 Ibs. 
B Stock $2,495 
New $2,995 


new Bw 


InFocus LP280 
SVGA © 1000 Lumens ¢ 5.7 Ibs. 


$1,995 


p stock 


Proxima DP9260 
XGA © 2200 Lumens ¢ 15.2 Ibs. 


$3,495 


Epson PowerLite 800p/810p 
800p * XGA ¢ 1500 Lumens ¢ 9.3 Ibs. 
810p ¢ XGA * 2000 Lumens ¢ 9.3 Ibs. 


800p $3,989 
810p $4,449 


For the best deals in New, Used, B Stock and Closeout projectors, go to... 


www.adtech-sys.com/cp 


Epson ¢ Hitachi ¢ InFocus ¢ Mitsubishi ¢ Panasonic ¢ Plus ¢ Proxima ¢ Sanyo ® Toshiba © Viewsonic 








IT CAREERS 


DTI, a software consulting co 
in Fremont, CA seeks Software 


Consultants at all levels to 4 os i . 
(@) (©) Business . 
integration 
CONFERENCE SERIES 


perform JD Edwards implemen 
tations and EAI! integration 
Requires travel 


Send resume: Careers, DTI The eBusiness 
ies is t 
47001 Benicia St., Fremont, CA designed t 
jesigned t 
94538. Fax (510) 353-3706 or vias , IT leaders with s 
. spectru 
email: careers @ dtius.com 
’ 
challenge 


We seek professionals > Featurir 
industry exp. for Pu plan 
etc. of solutions/enhancem ' 
to web enabled SAP 7/3 applis Series ( 
manage HRMS life cycles & high ¢ 
level strategic analysis, design 
etc. of HR Service delivery , advan 
supporting HR transition from Breed” s 
transactional process flow to 
business flow, etc. Hands on e-business In 
anabling HR us ff i » rice 
: Studio, {TS Join us for actionable advice 

CATS, ESS reqd. Pay ma’ g invaluable networking opportunities and 

Foreign educ. equiv ¢ practical solutions to your most pressing 
or com | " i 
Le gration e-business integration challenges. 
accepted el/relocation reqd , 
Resume to Global Resources ae 188 : utions 
Momt., Inc, 3355 NE Expwy, Ste - Tee re Conference Co-Chairmen 
2085, Atlanta, GA 30341." 2002 Event Schedule ws 

Ken Volimer William M. Ulrich 
Resea 2 Pres 


eMC MMP ea aera 


° New York - Sept. 23-25 
SY Mar THe ae os) 


and ¢€ 


strate¢ 


CHICAGO BOARD OPTIONS EXCHANGE 

age ntormetion Grong? 
Chicago Board Optio xchange 
is the world’s largest options 
e 


Technology advice 


Business results. 
ange. To gr ur business 


and increase our technical edge. 
we develop and implement the 
latest technology. We currently 
have the lowing OPPC 


Enginee 

Software and Hardware tiple openings for Database/Systems A 
Engineer ic th industry Manage & adminisi 
Sr. Pre mmer Analyst and xp. (var mbination 2000 Server & SQL 


C++ HP-UX database & applicati 
3E, Astea, SAP R/3 
VJ++, HP 9 


rt of the CE v : " , . * 2 
competitive salary and "i 7 fore é t i 
t benefits. F wie 4 structure performance 
: “ ~ tuning & data conversion servic 
eration, pleas end your TMX wine, < se. ) * J — a _ ene 
: : ni et ma Manage scalat 


POS 


via fax or e-mail indicating 


sources, 400 


ttwnertones| (aortas) (eee Gori ...only better. 


www.cboe 
b 


his is your opportunity To excel on this level. vou must embod 


@cboe.com or fa 312) 786 ‘ € to As ir to use your executive entrepreneurial spirit and thrive when given 
7808. Principals only, ple 


a level contacts ample leads, support and complete 
CBOE is an equa! opportunity f up f 


aggressive, entrepreneurial independence to aggressively pursue your 
spirit and sales presentation potential clients. Typically, qualified 
experience to build a candidates will be retired executives 
lucrative business. As a top successful sales professionals or any driven 
20 IT services company individual with a great rolodex filled with 
we're ready to contract high level decision makers regarding the 
with you to earn high purchase of IT products and services 
commissions for selling 


If qualified, you'll have the resources and 
our best-in-breed products 


: support of a world class, Top 20 IT Services 
and services to your client 


¢ organization at your disposal. These resources 
base. The expanse of parte POSe ¢ J 


will include sophisticated marketing and 
our software products : es 

je public relations materials, an efficient lead 
and capabilities in human 


~aring house and skilled technical support 
iTcareers.com Is capital management, web clearing house and skilled technical suppor 


s ' - E This commission only relationship will allow 
development, statting and 


the place where your fellow readers are getting technica inctruction 


programs will excite you 


a jump on even more of the world's best jobs. | to hit- the- ground running | For immediate consideration, send your 


after lucrative sales of resume to our recruitment advertising 

Chekcnen $1-30+ million. agency: ERRUNCLRERET (0: 
See for yourself. ) bes indnadna se 

cwo20204N 1 Computerworld + InfoWorld + Network World + February 4, 2002 


you to build your own business and you will 
be reimbursed for your expenses 
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SIEMENS 


Take a Closer Look. 


It's a great feeling to work for a company and 
know you really belong there. When the envi- 
ronment, the people, and the opportunity 

exceed your expectations and your hard work 


is appreciated. 


Software Engineer 


We are seeking a Software Engineer to design, 
code, implement, and test complex product 
enhancements. Other responsibilities include 
researching and coordinating new features con- 
cepts; analyzing problems and suggesting inno- 
vative solutions; designing and testing plans; 
training and reviewing design work of program- 
mers. Requires a Master’s or equivalent in 
CompSci, Information Systems, Engineering, or 
related field. In lieu of a Master’s Degree, a 
Bachelor's Degree plus 5 years as a Programmer 
is required. Must have proficiency in JAVA, JAVA 
Serviets, JAVA Server Pages, SQL, XML, Web 
Server, JAVA Script, HTML, and DHTML. 


Siemens Health Services specializes in develop- 
ing clinical, financial, and management solu- 
tions that support leading health providers 
across the continuum of care. As an integral part 
of our organization, you'll enjoy highly competi- 
tive compensation, including a wide array of 
benefits, and professional development oppor- 


tunities. 


isn’t it time you took a closer look? 


FAX: (610)219-8266 


Email: human.resources@smed.com 
Source Code: RADMCPWoo0G 
www.smed.com/careers 


Sr. Web Developer — At Quest 
Diagnostics Inc, we've become 
the nation’s most respected 
name in diagnostic testing by 
focusing on integrity, innovation 
and quality. We've created an 
environment where dedicated 
professionals can learn, grow 
and advance - all in an atmos 
phere of pride. We're currently 
seeking a Sr. Web Developer 
to be based in Lyndhurst, NJ 
Candidate will design database 
ness and presenta 
1 logic, research and develop 
complex web applications. Re 
quirements: Bachelor's degree in 
Computer Science, Electronics. 
or related field, 3 years experi- 
ence in OCAD/OOP, RDBMS, 
transactional middleware or web 
application servers. Knowledge 
of 3-tier architecture and devel- 
opment of complex web applica 
tions and corporate web sites 
also required. EOE/M/F/D/V. 
Please add source code: SWD- 
JG and forward your resume to: 
Email: questdiag @ alexus.com: 
Fax: 877-588-9942 or mail to 
Quest Diagnostics incorporated 
P.O. Box 3597, Scranton, PA 
185085. 


Full-time Project Manager of 
Accounts. Document & manage 
project plans, scope, objectives 
& timeline of various projects for 
assigned accounts. Supervise & 
direct project team members. 
Responsible tor direct communi: 
cations w/ clients, monitor analysis 
& evaluations regarding clients 
business & technical requirements 
to insure quality of the imple- 
mentation & customer satisfaction 
Work w/ Visual Basic, C, C++ 
SQL Server, MS Access, Oracle. 
Sybase & Cold Fusion. Must 
have a Bachelor's degree in CS. 
Computer Engineering or related 
field. Must have 2 yrs. exp. in job 
offered or position w/ same 
duties. Salary: $60,000. Send 
resume to Betsy Moya, Sema, 
701 Waterford Way, Suite 300, 
Miami, Florida 33126. 


Cw020204.2 


IT SUPPORT ENGINEER 
Designs, develops and main- 
tains software for LINX data 
collection terminals. Assembies 
and maintains PC hardware 
including POS and TPOS sys- 
tems (pole displays, receipt 
printers, scanners and network) 
installs and supports ICVERIFY 
multi-user credit authorization 
service. Designs, develops and 
maintains hardware, software 
for RF data collection systems 
Designs, develops and main- 
tains applications used in retail 
stores and back-office systems 
utilizing Visual Basic 6.0, Crystal 
Reports 8.0 and relational 
databases. Provides bilingual 
(Spanish-English) “Help Desk" 
support for stores and support 
center users, including off-hours 
on-call support. Job is in Boca 
Raton, FL. 40 hrs. weekly, 9-5PM, 
$88,000.00/yr. Bachelor's degree 
or equivalent in Systems Engi- 
neering or related field and 2 
years experience in job offered 
Fax resume to 99¢ Stuff, LLC 

Attention Russ Field (561) 999- 
0515 


SOFTWARE ENGINEER 


The Software Engineer shall 
perform systems architecture 
systems analysis and design 
Internet technologies, program- 
ming, programming languages. 
database designs, data modeling, 
database programming, Java 
and C++. Must have a minimum 
of a Masters Degree in Engineer- 
ing Science, Computers or related 
experience; will accept Bachelor's 
Degree plus five years experience 
as described above 


Salary $68,000.00 per year, 
full time, plus standard benefit 
package 


Send two copies of letter of 
application and resume to: 


Job Order # 2001-828 
Post Office Box 989 
Concord, NH 03302-0989 


Berane 


(Swine, 


INFORMATION 
TECHNOLOGY 
...+ OPPORTUNITIES 


The Gillette Company is the 
world leader in more than 
a dozen consumer product 
categories. Global World Class 
operations are increasingly 
dependent on Information Tech- 
nology. Exciting opportunities 
exist in global business process 
integration initiatives. We are 
currently seeking the following 
highly qualified professionals to 
join the Gillette IT team in the 
Boston area 


The following positions 
commonly require a Bachelor's 
degree (or equivalent) in 
Computer Science, MIS 
Business Admin., or similarly 
relevant field, and 3-5 years 
relevant experience 


! Staff Programmer Analysts 


! (SAP) Staff Basis Adminis- 
trators/Con-figuration- 
Integration Specialists/ 
Application Developers 


! Data Warehouse Architects/ 
Developers/Database 
Administrators 


! Telecommunications 
Analysts 


Starting salaries range from 
$56,100 to $119,000 per year, 
together with paid vacation 
medical, dental, life and 
disability insurances, and other 
industry-competitive benefits. 


Please mail / email resume to 
The Gillette Company, Prudential 
Tower Building, Boston MA 
02199-8004 ATTN: Elizabeth 
McFarlen, Senior Human 
Resources Representative 
Email: www.Gillette.Com 


The Gillette Company is an 
equal employment opportunity 
employer 


Sr. Software Eng'rs: Dsgn, dviop 
& implement web-based sw 
applica'n w/ASP, SQLServer 
2000, 7.0&6.5, ADO, JavaScript 
VBScript, DHTML, HTML; Dsgn 
DB & frontend for applic’n w. 
SQL, Oracle8.x, & convert DB 
from DB2/Oracie into SQLServer 
based. 40h/w, 8-5, BS in 
computer-related field/foreign 
equivalent, & 5 yr wk exp. in job 
offered or in any other position 
involv'g ASP, DB2/Oracle, & 
SQLServer. Resume to L. Ward 
Best Software, inc. 888 Exec. Ctr 
Dr. W, #300, St. Pete, FL33702. 
or at laurie. ward @ bestsoftware 
com fax: 727-578-2178 


Full-Time IMC Senior Database 
Consultant. Responsible for 
interacting with client managers. 

integrators and users regarding 
functional aspects of assigned 
projects. Identify client's business 
requirements, determine en 

hancements, create functional 
design specifications, and provide 
change management guidance 
working with BSCS, Gupta 

Centura, Oracle, Unix, C, PL/ 
SQL, Visual C++, Visual Basic 

Visual Fox Pro, MS SQL, Access 
and TCP/IP. Assist clients with 
conversion strategies and plans 
and resolve/troubleshoot all con- 
version issues. Develop testing 
strategies, plans and analyze 
codes to determine database 
population and defects. Must 
have Bachelor's degree in Com- 
puter Science, any Engineering 
discipline or related field. Foreign 
degree equivalent accepted 
Must have 4 yrs. exp. in job 
Offered or position w/ same duties. 
Salary: $66,000. Send resume to 
Betsy Moya, Sema, 701 Waterford 
Way, Suite 300. Miami, Florida 
33126 


Network Manager 
(New York, NY) 

Royalblue financial corporation, 
aleading supplier of globai trading 
software with offices in New York, 
London, Frankfurt and Tokyo, re- 
quires a fidessaNet Network 
Manager. Royaiblue has devel- 
oped the fidessa trading platform 
to provide the most complete 
range of applications available 
for trading cash equities across 
the world's markets. Responsi- 
bilities include: 

* Network design, installation and 
support; 

* Managing mid-to-large (500+ 
node) network; 

* Cisco router/switch configuration: 

¢ Network management applica- 
tions 

Applicants will have a Bachelor 

of Science degree in Telecom- 

munications, Engineering or 

a closely related field and expe- 

rience with engineering and 

integrating connectivity to Equities 

Trading Exchanges (eg NYSE 

NASDAQ) & ECN's (eg Island, 

Archipelago) 

Certifications Required: 

* CCNP (Cisco Certified Network 
Professional) 

* CCIE (Cisco Certified Internet- 
working Expert), or actively 
pursuing; 

*MCSE (Microsoft Certified 
Systems Engineer) 

*SUN Solaris certified, or 
actively pursuing 

Apply to Royalblue Financial 

Corporation, 17 State Street, 

New York, NY 10004, Attn: Human 

Resources (NM) 


Consulting comp. in NJ req. for 
its ongoing conversion Projects 
a System Analyst w/BS Deg. or 
its equivi. & 2 yrs. exp. of design 
exp. in Financial/Accounting 
packages. Candidate should 
have req. skills on the AS/400, 
OS/400/SYNON 4E/JD Edwards 
& Oracle Platform 

Emoimts., is based on edu. & 
exp. Travel & relocation req. to 
unanticipated client sites. Send 
resumes to: Attn RECRUITER, 
TRANSWORLD INFO. SYS- 
TEMS, Inc., 33 WOOD AVE., 7 
FL. ISELIN, NJ 08830 


Software Engineer (Melrose Park 
PA) Analyze, design, develop 
implement programs for com- 
mercial & financial applications. 
Uses VB 6.0/5.0, Oracle 3i/8.0 
SQL+, PL/SQL, web technologies 
COM, DCOM, MTS, ActiveX, VB 
Script DHTML. BS Comp. Sci 

Eng. Fax resume 215-782-2083 


Ref. RM 


Systems Analyst needed for 
Miami computer sales and 
export co, to review computer 
system capabilities, workflow, 
and scheduling limitations. Min 
req. 4 yrs exp. Send resumes to 
TWC The Wise Computer, Inc 
P.O. Box 226438 Miami, FL 
33122 


InfiniSwitch is a leader in Infini- 
Band switching technology for 
data centers. We are currently 
seeking Software Quality Assur- 
ance Engineers. Our Software 
Quality Assurance Engineers 
will work with the InfiniBand 
specifications and with input 
from other engineering team 
members to isolate and expose 
system and sub-system problems 
and develop resolutions. They 
will also develop and execute 
test plans and cases required to 
fully test and qualify Infiniband 
Switch products, and conduct 
software integration testing, 
load/performance testing and 
install Operating Systems and 
Networks. Requirements include 
a MS in CS or closely related 
and two years experience as 
Software Quality Assurance 
Engineer (or will accept BS in 
CS and five years experience. 
two of which are in QA). Also 
required is high degree of profi- 
ciency working with following 
Linux or Windows 2000 operating 
systems; Network switches, fibre- 
channel SAN components, or 
SNMP Management testing; and 
application load/artificial traffic 
load generation, test automation, 
or performance testing. Interested 
applicants may send their 
resume to Human Resources, 
InfiniSwitch Corporation, 134 
Flanders Road, Westborough 
MA 01581. F 508-870-3146 


Several computer related 
positions available for a large 
communications, marketing 
and distributing company. 
Degree, technical skills & 
experience vary per position. 
Send resume to Ernie Mueller, 
CMD Services, Inc., 3060 
Premiere Parkway, Duluth 


GA 30097 


PRODUCT MANAGER (INTER- 
NET), U.K. & EUROPE ISSUES 
-(New York, NY), define Product 
Vision & Direction For All 
Company Products (Internet & 
Connectivity Solutions) in UK 
and Europe: Act as primary point 
of contact for UK sales and 
marketing teams; Oversee 
market analysis and oversee all 
product development initiatives 
for region; act as an interface 
between US product manage- 
ment and UK/Europe. Bachelors 
Degree in Business Administra- 
tion/Economics, 1 year experi- 
ence. 40 hours per week, 9:00 AM 
to 5:00 PM. Send resumes/letter 
to: HR Dept., Globix Corporation 
139 Centre Street, New York, NY 
10013. 


Exp'ed Prog/Sys Analysts, Net- 
work Engineers, DBAs and S/W 
Engineers required for branch 
locations in Santa Clara, CA, Mt 
Laurel NJ, Conshohocken, PA 
Skill sets - C, C++, Java, HTML on 
UNIX/Windows; Visual Basic. 
Visual C++, Power Builder; Oracle, 
PL/SQL, Pro*C; UNIX, Windows 
2000/NT Sys. Admin. Require BS/ 
MS in CS/Engg/Math/Business/ 
Science (or its foreign equiv and/ 
or equiv. in education and exp.) 
And relevant exp. Trave/Relocation 
required. Salary commensurate 
with exp. Resumes to: HR, Fourth 
Technologies, 27 Roland Avenue, 
STE B, Mount Lourel, NJ 08054. 
Indicate on resume the branch 
office you are applying for 
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ing companies 
companies 


PSM CM lw t 


Computerworld + InfoWorld » Network World + February 4, 2002 


a Kama Consulting Inc. 


TOP $$'s, W2 or 1 


We are a fast growing 
ee company based 
in New Jersey. 
Excellent opportunities for 
Programmers, 
Systems Analysts, DBAs. 


Sun Solaris System Admins, 
Natural, Powerbuilder, 
ADABAS, ORACLE, SYBASE, 
PROGRESS, COBOL 
TCPAP, Delphi/VB, Windows NT 


Send your resume to 
Rod McFadden 
Kama Consulting 
Fax:201-934-7166 
Email:Kamaco@aol.com 


Programmer/Analyst (4 openings) 
Design, test, code, implement 
and maintain for internal and 
external web-based 3-tier appli- 
cation architecture projects using 
HTML, J2SE, Java SERVLETS, 
XML, EJB, Apache-JServ, Java- 
script. Req. B.Sc. or its foreign 
degree equivalent in C. Sci., EE, 
or other related field w/ at least 2 
yrs. exp. in job offered. Resume 
to: HR Manager (job code 
CW0102), Ptek Holdings, 3399 
Peachtree Rd. N.E. Ste 600, 
Atlanta, GA 30326 


Software Engineer (Melrose Park, 
PA) Programming in .NET, VB/ 
ASP+, MTS, Tuxedo, CDO, 
T-SQL. Maintains SQL, Exchange, 
lS Servers. Designs & Develops 
applications like HRMS, Airline 
Ticketing, EBiz Medical Soft- 
ware. Prepares Technical Project 
Proposals. Fax resume 215-782- 


2083 Ref. DD. 


Senior Database Administrators 
Newton, MA office needs expe. 
rienced individuals for perfor- 
mance monitoring, tuning and 
testing. Send resumes to: C 
Wyzga, EIS-CW02-SDBA, Eagle 
Investment Systems, 65 LaSalle 
Rd., W. Hartford, CT 06107 
EOE/F/M/V/D/Legal workers 
only please 


PROGRAMMER/ANALYST to 
analyze, design, develop, test 
integrate and implement appli- 
cation software using object 
oriented Techniques, Java. 
Websphere, J Builder, JSP. XML, 
XSLT, XPATH, XLINK, DB2 
Oracle, Ant, Resin and Tapestry. 
Require: BS Degree & 5 years 
of Experience or Masters in 
Computer Science/related sub- 
jects & 2 years of Experience 
Salary: $50-60K. Fax resumes to 
770-973-0706 or email To ameen 
@software superheroes.com 


(it 








IT) careers.com 


Programmer Analyst to analyze, 
research, design and develop 
scientific computer applications 
using statistical software such as 
SAS, SPSS and languages such 
as C, C++ and Oracle Databases 
with PL/SQL under Unix, VAX 

VMS platforms. Gather user and 
technical specification to maintain 
scientific applications. Require 
BS in sciences, computer science 
or engineering (any branch) and 
2 years of experience in software 
development. Competitive salary. 
Some travel/relocation required. 

} Send Resumes to: UNILINX 

4625 Alexander Drive, Suite 
110, Alpharetta, GA 30022 
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CC Phila. Co. seeks a Software 
Engr./ETL Specialist. BS in Engr. 
req, along with min 5 yrs, exp. in 
software dev, expert knowl. in 
Data Warehousing, SQL, MS 
Access, SQL Server, Oracle 
RDBMS, relational & dimensional 
data concepts, Win NT, exp. with 
ETL, query & analys. tools such 
as Cognos DecisionStream, 
Transformer, Impromptu & Power 
play. Send resumes to: Box 
58034, Phila, PA 19102, Attn 
Dave Conrad. EOE/AA. 


Computer Professional needed 
w/exp in: Oracle Tools, Oracie 
enterprise Manager, Network 
Manager, Developer Suite, Export/ 
Import, Oracle Application Server, 
Microsoft IIS, RMAN, SQL*Pius 
ERWIN, SQL*Net, PL/SQL, SQL 
“Navigator, SQL*Loader, C, C++ 
Java, Javascript, PB, COBOL, 
CICS, DB2, VSAM, UNIX 
Administration, Sun-Solaris Ad- 
ministration, MS Windows/NT. 
Apply to: Prosoft Consultancy 
Services, Inc., 15310 Amberly 
Dr, Suite 250-12, Tampa, FL 
33647. No in person resumes: 
interviews, only respond by mail 
or e-mail 


Network Administrator needed 
for Miami Beach computer and 
electronic sales co. to monitor 
data communications network 
to ensure that the network is 
available to all system users. Min 
req. 2 yrs exp. Fax resumes 
to Sound Connection and 
Distributors, Inc. (305) 538-0881 


Computer Graphics Designer in 
NYC. Masters in Communication 
Arts or related with concentration 
in Computer Graphics or related 
Min. 1 yr. exp: designing 3D ani- 
mated moving graphics for web 
pages; maintenance of web 
graphics; Access; PhotoShop 
5.0, HTML, DHTML, JavaScript, 
HTML/Graphic editors; 3D design 
40 hrs/wk M-Fri 9-5. Send resume 
to: Job 8, P.O. Box 5275, New 
York, NY 10185-5275 


Computer Systems Engineer 
needed for Miami Architecture 
Co. to analyze data requirement 
and pian data processing system 
for projected workloads. Min 
req. 4 yrs exp. Send resumes to 
Architectural Design Consortium. 
Inc. P.O. Box 370546 Miami 
Florida 33137 


IT CAREERS 


Jr. Programmer. Assist in design 
& dev. of s/w sys. inc. functional 
& tech. specs. Conduct needs 

is. Assist in developing 
Sys. procedures, docs, coding 
& testing progs. Req.: BS in 
Computer Eng. or Computer 
Sci. 40-hr wk. Job/Interview Site: 
Diamond Bar, CA. Send resume 
to MTSI, Inc. P.O. Box #207 
1142 S. Diamond Bar Bivd. 


Diamond Bar, CA 91765 


Software Engineers 

Automated Power Exchange 
located in Santa Clara is seeking 
Software Engineers possessing 
MS/BS or egiv. and/or relevant 
work exp. Work exp. with 
RDBMS + SQL, MS SQL Server 
and one or more of the following: 
Javascript, VBScript, ASP, VB 
and XML. Exp. developing com- 
mercial applications and dealing 
with settlements in the power 
industry desired. Must be willing 
to travel and relocate as required 
in the U.S. Mail resumes to 
Automated Power Exchange 
c/o HR, 5201 Great America 
Parkway, Suite 522, Santa Clara 
CA 95054 


Junior Programmer. Assist pro- 
grammers in developing finance 
and accounting software with the 
use of database and spread- 
sheet programming. Requires 
a B.S. Computer Science/Com- 
puter Eng. or related field. 40 
hour work week. Send resumes 
to eMachines, Inc. 14350 Myford 
Road, Bidg. 100, irvine, CA 


92606 


COMPUTER APPLICATIONS 
ENGINEER. Design, code & test 
Projects in client-server tech 
using VC++, VB, Java, Oracle 
ASP, SQL Server & Visio. Doc. & 
manage projects. Req.: Bach. in 
Comp. Science Engr. or Elec- 
tronics/Electrical Engr. 40-hr wk 
Job/Intvw Site: L.A., CA. Send 
resume to Vikmere Software 
3723 Watseka Ave., #9, Los 


Angeles, CA 90034 


SOFTWARE ENGINEERS: Re- 
sponsible for software integration 
and external interface develop- 
ment. Use combination of Oracle 
PL-SQL, CASE tools and Peo 
pleSoft under Oracle 8.x envi 
ronment to develop, create. 
modify and maintain application 
software and/or utility modules 
for DoD HAMS application 
64K-72K(F-T; 40hr/wk); New 
Orieans, LA; B.S.Computer 
Science (or equivalency); 4 yrs 
experience or related experience 
in ERP package customization 


Contact: Kenneth Burkhalter 
personnel @ otisinc1 .net 
Tel.: (985)781-3892 
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JAK International Corp., is a 
diversified trading firm with 
operations in the U.S. and over- 
seas. Our company currently 
has openings for the foliowing 


Business Integration Analysts 
Analyze business intelligence 
requirements of client users to 
automate processing in the 
context of financial reporting 
supply chain integration, and 
e-commerce applications. Inter 
face with programmers and DBA 
in design and implementation 
of software solutions. Prepare 
technical reports for detailed 
documentation of software 
change management procedures. 
Use relational databases including 
Oracle and DB2. Engage in 
project management, business 
process re-engineering, and 
inter-company electronic data 
transactions using knowledge of 
mainframe, client-server, and 
web-based environments 


Need Master's degree in 
Computer Science or Business 
Administration. Need 1+ years of 
experience. Send your resume 
to: VP Operations, 7322 S.W. 
Frwy., Suite 788, Houston, Texas 
77074 or send via e-mail to 
careers @ jakinti.com 


DATABASE MANAGER 
Davenport University is in search 
of a highly qualified Database 
Manager. Responsibilities include 
Operation and maintenance for 
the library automation system 
including software and hardware 
upgrades; design, development 
and maintenance of University 
web page; coordinate and 
implement systems’ security 
and maintenance of remote 
online access to the library 
automation system catalog, the 
online resource databases and 
network access to the library 
automation system databases 
utilizing NT/Windows 2000, Sun 
hardware and Sun Solaris UNIX 
operating system 5.6, Sun 
Solstice disc suite, Sybase, and 
Sequel Server systems. 
Candidates must have a Bachelor 
of Science degree in Computer 
Science or Business Adminis- 
tration with coursework in 
computer information systems. 
Candidates must aiso have 
permanent authority to work in 
the United States 
Send resumes to Human 
Resources, Davenport Universi- 
ty, 415 East Fulton, Grand 
Rapids, Mi 49503. 


Software Development Engineer 
— Collins & Aikman is seeking in- 
dividuals with specialized skills 
in Graphical User Interface (GU!) 
software development for the 
position of Software Development 
Engineer. A Master's degree in 
engineering, computer science 
or related fieid is required for this 
position, as well as one year 
of experience developing GUI 
software features using X-Motif 
and Java programming languages. 
Fax or mail resumes to: Attn 
Director, Global Acoustic CAE 
Technology, Collins & Aikman 
Corporation, 47785 West Anchor 
Court, Plymouth, Mi 48170-2456. 
Tel: 734-207-7302; Fax: 734-354- 
2220; Email: satha.raveendra 
@colaik.com 


Sr. Systems Engineer. Design 
prototype, debug, & test embed- 
ded hardware, radio sys., & 
software; perform simulation 
schematic entry & PCB layouts. 
M.S. in Elec. Eng., Comp Eng. 
or rel. field & 5 yrs. rel. exp. or 
equiv. educ. & exp. 5 yrs. exp. to 
include: A/D & D/A conversion 
DSP sys. hardware; Assembly; 
C/C++; in-circuit emulators & 
logic analyzers; PCB layout 
tools. Send apps. to Marv Van 
Wyk, Vermeer Mfg. Co., 1210 
Vermeer Rd East, Pella, lowa 
50219. 


Manager of Information Services 
& Operations. Manage network 
and computer infrastructure, 
web site, and user support; create 
and implement operational 
procedures. Prepare contingency 
plan for e-mail server, financial 
applications server, ROBMS 
server, and internet. Evaluate 
and implement Internet and LAN 
security. Manage network 
cabling infrastructure based on 
AT&T standards; monitor LAN 
and WAN performance. Manage 
and troubleshoot high-speed 
modems and switches for leased 
line, T1 lines, etc. Install, trou- 
bleshoot, and monitor software 
and hardware based routers 
connecting overseas. Design 
network connection between 
European, U.S. and Asian offices, 
install, manage, and troubleshoot 
remote connectivity for European 
South American, and Asian 
Offices. Plan for new Sun-based 
servers to run RDBMS system 
install connectivity from local to 
remote client. Must have Bache- 
lor's degree in Computer Science 
or related, plus four years expe- 
rience. Must be able to design 
networks over T1 and leased 
lines, provide network manage- 
ment, security, and troubleshoot- 
ing; use IP routing technologies. 
gigabit ethernet, remote access 
with VPN connectivity, Check- 
Point Firewall-1, Cisco Catalyst 
Switches, VLAN, and Sun Solaris. 
Must have knowledge of Asian 
and European telecommunica- 
tions standards. Send resume 
with cover letter to Genetic !D 
Attn: Jane Pappin, 501 Dimick 
Drive, Fairfield, lowa 52557. 


Oracle Computer Applications 
Developer (various assignments 
as position evolves), under 
supervision of supervisory 
personnel, to design, develop 
test, implement and debug 
computer software applications in 
Oracle specific technology 
including writing SQL and PL/SQL 
statements manually, and grow 
with Oracle technology as it 
evolves to develop cutting edge 
Oracle skill set commensurate 
with the technology as it evolves 
utilizing the ability to write SQL 
and PL/SQL statements manual 
ly and the ability to grow with Or- 
acle technology as it evolves (as 
evidenced by present proficiency 
in Oracle 7.X, 8.0 and 8.1). Re 
quires Bachelors or equivalent 
level degree in Computer Sci- 
ence, Math, Physics or Engineer. 
ing or a closely related field. Qual- 
ified applicants must presently be 
eligible for permanent employ- 
ment in the United States. Suc- 
cessful applicant must be able to 
perform job duties on date of ap- 
plication and be abie to pass 
Wonderlic math and logic and 
Achiever business skills tests 
Send resumes to Mr. Jeff Knott. 
Employment Manager, TALX Cor- 
poration, 1850 Borman Court, St 
Louis, Missouri 63146. An equal 
opportunity employer. 


TECMAG is a scientific research 
and technology based organiza- 
tion specializing in manufacturing 
of Nuclear Magnetic Resonance 
(NMR), Nuclear Quadrupolar 
Resonance (NQR), and Magnetic 
Resonance imaging (MRI) 
equipment and software inciuding, 
computer systems, scientific and 
engineering software, and data 
acquisition systems. We are 
currently looking for the following: 


Software Engineers: Research 
design, develop, and maintain 
software for scientific and tech- 
nological applications including 
use in NMR, NGR, and MRI 
applications. Develop and direct 
system procedures, programming 
and design using knowiedge 
of data processing, hardware 
interface, display graphics, and 
Windows NT/2000 GU! applica- 
tions. Utilize strong C++, MFC 
and numerical analysis skills. 
including advanced scientific 
mathematica! algorithms, and 
automation skills. Requires a 
Master's degree in Computer 
Science and 1+ years of experi- 
ence in position offered 


Send Resume to: Gloria at 6006 
Bellaire Bivd., Suite #117 
Houston, Texas 77081 or send 
via e-mail: jobs @tecmag.com 
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Computer/Info Systems 


SENIOR PROGRAMMER/ 
ANALYST 


We are a privately owned 
50 billion, AAA-Aaa rated 
financial institution providing 
central banking services for 
thrifts, banks, and credit unions. 
We currently have an excellent 
opportunity available for a Senior 
Programmer Analyst. Responsi- 
bilities include analyzing, design- 
ing, coding & implementing soft 
ware systems, programs & 
applications using Microsoft 
Access, Visual Basic, SOL Server 
& Microsoft Windows NT; prepare 
detailed project plans & specifi 
Cations; provide technical support. 
create & rnaintain system docu: 
mentation; prepare status reports 
for management: act as project 
leader on specific projects. 


We require a Master's degree 
in Computer Science or Infor- 
mation Systems required; 1 year 
experience in the position or 
1 year as Data Analyst and/or 
Programmer Analyst required 
Related occupation must include 
experience in analyzing, design- 
ing, coding & implementing soft- 
ware systems, programs and 
applications using Microsoft 
Access, Visual Basic and SQL 
Server. Excellent orai/written 
communication skills. 


We offer a competitive salary 
and comprehensive benefit 
package including a 401(k) plan 
Qualified candidates should 
send resumes with cover letters, 
including salary requirements to 
Human Resources Department, 
Federal Home Loan Bank of 
Chicago, 111 East Wacker Drive. 
Suite 800, Chicago, IL 60601 
e-mail hr@fhibc.com , or fax to 
(312) 565-5812. EOE M/F/D/V. 


ECAL Solutions Inc., provides 
information technology consu! 
tation services with highly quaii- 
fied and committed professionais 
for the clients to optimize and 
maximize their outout. We are 
looking for the following posi 
tions: 


Software Engineers: Research 
and analyze web and software 
applications. Develop and ad 
minister the e-commerce appli- 
cations in Oracle, DB2, SQL 
Server, and Sybase using 
Java,WebLogic, JRun, Jbuilder 
XMLSpy, Excelon Stylus and 
related technologies on Windows 
and UNIX. Requires a Master's 
n Computer Science or Engi 
neering or related field and 1 
year of experience. 


Programmer Analysts: Design 
and develop client-server appli- 
cations using Oracle Financials 
Customize payable order, con- 
versions, interfaces, manage new 
products or enhance existing 
products using, VB, SQL Server, 
PERL, ASP, and XML. Analyze 

usiness procedures, solve 
problems, redefine and convert 
data to a programmabie form 
Requires a Bachelor's in Com- 
puter Science or Engineering or 
a related field and 2 years of 
experience 


Send Resume to: HR, ECAL 
Solutions Inc., 9207 Country 
creek Drive, Suite # 207, Houston 
Texas 77036 or via e-mail at 
hr@ecalsolutions.com 


Systems Engineer 


Test, install and maintain computer 
operating systems; monitor and 
install data communication lines. 
maintain the NT infrastructure 
develop, implement computer 
networking pian; test and imple- 
ment Chinese interface of the 
chips of elevators. Master 
degree in computer science is 
required. Send resume to Mr. 
Marvin W. Schumacher, Schu- 
macher Elevator Company, inc 

One Schumacher Way, Denver, 
!A 50622. 
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eCommerce Software Engineer Ii 
Milwaukee, Wisconsin Re 
SE ‘hes, designs, and develops 
eCommerce applications. Designs 
applications to meet require 
ments specified by the Web To 
Team Lead. Designs Class and 
Sequence Diagrams. Facilitates 
Design Reviews. Facilitates Code 
Review for her/his own work 
Participates in Use Case devel 
opment. Performs detailed tech 
nical assessment of new tech 
1ologies and platforms, and 
recommends direction to Software 
Engineer Team Lead and Web 
To Team Lead. Performs integra 
tior f ‘Web’ applications to 
various Business Sy ns and 
the integration of the same 
Business Systems to various 
Workbench’ processes. Develops 
code for individual components 
of ‘Web’, ‘Workbench’, and inte 
gratic D i Designs 
usé to ensure easy-to 
follow user ens. Builds and 
executes test plans. Participates 
yntent generation and up: 
Gate: AIMIMENCE SOILTIONS. 
Tracks and logs time spent on al 
activities and submits weekly 
Status Reports Software 
Engineerir am Lead. Other 
duties may assigned. Re- 
quired is a Bachelor of Science 
degree in Computer or Software 
Engineering and a minimum of 
one (1) year post-baccalaureate 
work experience as a Software 
ineer. As part of the required 
revious experience, the appli 
cant must have had: experience 
e formal design, development 
plementation, and test of 
are systems based upon 
ments; and expe 
with the following soft 
2 platforms: C/C++, Visual 
JAVA ver 1.1, Websphere 
rver, XML and 
and MS Visual 
Modeler. Must have pro 
legal authority to work p: 
the United S| 
onsiderati please 
e at www.bradycorp.com 


An Equal Opportunity Employer 


COMPUTER/IT 
Organizational Management 
Team Member. (Troy 
Requires a Bachelor's 
nt foreigr 
science 
yement information systems, 


siness administration yr 
ering field, and 2 years 
n the offered 


exe 
f 


rganiz 

P R/3 HA ational 

agement module. Must 

mpleted one full life 

lementation 

egration testing. Engage 

lementation and configu 

anization 

H.R 

Management 

in and configure 

zational management 

requirements. Engage in full 

implementation and 

] testing of SAP R/3 

Develop functional specifications 

Jentify gaps between SAP R/3 

jons and company business 

quirements. 40 hrs./wk. 8:00 

5:00 Apply with resume to 

Jennifer McKenzie, 1450 W. 

Long Lake Road, Troy, Michigan 
48098 


~~ 


aman SKILLSOFT 


PEOPLE WITH THE FOLLOW- 
ING SKILLS NEEDED FOR 
ASSIGNMENTS THROUGH- 
| OUT THE USA. ORACLE, SY. 
SE, POWERBUILDER, AS- 

), PROGRESS, UNIX SYS 
ADMIN, NATURAL, SQL/SER 
VER, JAVA, INGRES, SAS. PLE- 
ASE MAIL RESUME TO DIR. RE- 
CRUITING, Skilisoft Incorporated. 
20283 State Road 7, Suite 300. 
Boca Raton, FL 33498, U.S.A 


Programmer Analyst (multiple 
openings): Plans, develops 
tests, and documents computer 
programs. Converts project 
specifications, using flowcharts 
and diagrarns, into sequence of 
detailed instructions and logical 
steps for coding into computer 
language. Analyzes, reviews 
and alters program to increase 
opereting efficiency or adapt 
to new requirements using rela- 
tional database management 
system (RDBMS) and related 
software. One year of experi 
ence in job offered or as a 
computer professional required 
including one year of experience 
using 1 of A as follows: Informix 
Oracle, FoxPro, Sybase, SQL 
Server, Progress. Work involves 
extensive travel and frequent 

ation. Bachelor's degree or 
foreign equivalent or equivalent 
combination of education and 
xperience, in one of several 
limited fields: Computer Sci 
Apps, Eng., Chem., Math 
Physics or scientific or business 
related field. Salary: $67,000 
per/yr, 40 hrs/wk., 8:00-5:00 p.m. 
Please submit resumes to 
Director, Pittsburgh/Allegheny 
Co. CareerLink, ATTN: JS 
Supervisor, 425 Sixth Ave., Suite 
2200, Pittsburgh, PA 15219 
Reference: Job Order No. WEB 
222444 


Programmer Analyst consulting 
positions (multiple openings) 
to plan, develop, test, and 
Jocument computer programs 
applying knowledge of program. 
ming techniques and computer 
systems. Converts project 
specifications, using flowcharts 
and diagrams, into sequence of 
detailed instructions and logical 
steps for coding into language 
Pprocessableby computer, applying 
knowledge of computer to run 
and test programs. Analyzes 
reviews, and alters program to 
increase operating efficiency or 
adapt to new requirements. 
Must travel and relocate frequent 
ly. 3-4 year Bachelor's degree 
or foreign equivalent required 
Candidates must have one year 
n the job offered 
or as a computer professional 
Candidates must have one year 
of experience using one of the 
following: Informix, Oracle, Fox 
Pro, Sybase, SQL Server 
Progress. $67,000 per/yr, 40 
hrs/wk. Please submit resumes 
to: Fayette County Team PA 
CareerLink, ATTN: JS Supervisor 
32 lowaStreet, Uniontown 

513, Job Order # 


of experier 


Computer Systems Administrator 
For non-profit educational 
assoc., design, install & support 
LAN, e-mail system & website 
Maintain, update, & train users 
for iMIS software; maintain 
network hardware & software 
implement network security 
measures. Req's: B.S. in Comp 
Sci. or related field. 1 yr exp. in 
job offered or 1 yr exp. in Comp 
Sys. Maintenance or Help Desk 
Supp Exp. must include 
troubleshooting & maintaining 
& supporting network-based 
applications. Prof. in iMIS soft 
ware. 40hrs/wk. Send resumes 
to Dr. Kiein, 423 Exton Commons 
Exton, PA 19341 


Multiple openings for s/w 
Eng/Consultants, Programmer 
Analysts, Project Leaders. 
Managers, Account/Product 
Manager, Systems/Management 
Analysts, Web Masters/designers 
and project engineers. Some 
positions require Bachelors (or 
equiv.) while others require 
Masters (or equiv.) in CS, Engg 
Math, Bus Admin or reiated field. 
We will accept the foreign equiv. 
of req'd edu. and/or its equiv. in 
edu & exp. Exp will depend on po 
sition. Send resume to JRD Sys- 
tems, 42524 Hayes Rd, # 100 
Clinton Twp, MI 48038. 


IT CAREERS 


Software Engineer consulting 
positions (multiple openings) to 
design, develop and implement 
computer software systems 
applying principles and tech 
niques of computer science 
engineering and mathematical 
analysis. Analyze software 
requirements to determine fea- 
sibility of design and directs soft- 
ware system testing procedures. 
programming and documentation. 
Must travel and relocate frequently. 
Bachelor's degree or functional 
or foreign equivalent is required 
in one of several limited fields 
Computer Science/Applications 
Engineering, Chemistry, Math 
Physics, or business related 
field. Candidates must have six 
months of experience in the job 
offered or as a computer profes. 
sional. Candidates must have 
six months of experience using 
one of the following: Informix, Or- 
acle, FoxPro, Sybase, SQL 
Server, Progress. $67,000 
per/yr, 40 hrs/wk. Please submit 
resumes to: Manager, Washington 
County Team PA CareerLink 
MillcraftCenter, Suite 150LL, 90 
West Chestnut Street, Washing- 
ton, PA 15301-4517, Job Order 
#: WEB222425 


COMPUTER/IT 

SAS Programmer. Siamford, CT. 
Perform database and bio- 
statistical analysis and manage- 
ment through the development 
of SAS programs. Duties include 
creation of tables, listings, graphics 
and derived analysis data-sets 
for final study reports of clinical 
trials. Programmer will validate 
his own programming code and 
perform second programmer 
validation of other programmers’ 
programs. Duties will also include 
assistance in the development 
and validation of integrated data- 
bases and the related tables, list 
ings and graphs for integrated 
safety and efficacy summaries. 
Requires: B.S. or foreign equiv 
alent in scientific, mathematical 
or computer-related discipline. 2 
yrs. of exp. in job offered or as 
Programmer Analyst. Experience 
which may have been obtained 
concurrently must include: 2 yrs. 
of exp. of Statistical (SAS) 
Programming experience within 
the Pharmaceutical industry. 
EOE. 40hrs/wk. Send resume 
(no calls) to Mr. Keith Sheily, 
Managing Partner, Smith Hanley 
Consulting Group, Inc. 1025 
Greenwood Bivd, Suite 231 
Lake Mary, Florida 32746 


SAP ANALYST for Syndein 


Consulting Services inc 


computer consulting Enterprise 


Resources Software company 


in Las Vegas, NV. Various antici 


pated job sites throughout the 


U.S. Fax resume attention Ken 


Sidley at (530) 327-7949 


Programmer/Analysts/Engineers 
needed. Andrews Resources 
Inc, a Waukegan, IL based 
company is seeking qualified 
candidates possessing MS/BS 
or equivalent an?Vor relevant 
work experience. Work with 2 
or more of the following: Java 
J2EE Weblogic Internet 
programming, OOAD, Oracle 
DB. Fwd. resume to: HR at 
Andrews Resources, Inc., 2708 
Grand Avenue, Waukegan 
Wlinois 60085 


Programmer Analyst consulting 
positions (multiple openings) to 
analyze user requirements. 
procedures, and problems to 
automate or improve existing 
systems and review computer 
system capabilities, workflow, 
and scheduling limitations 
May analyze or recommend 
commercially available software. 
Analyze science, engineering 
business, and other data 
processing problems for 
application to electronic data 
processing systems. Must travel 
and relocate frequently. Bach- 
elor's degree or equivalent 
combination of education and 
experience is required in one of 
several limited fields: Computer 
Science/Applications, Engineer 
ing, Chemistry, Math, Physics, or 
scientific or business related 
field. Candidates must have 
one year of experience in the job 
offered or as a computer profes- 
sional. Candidates must have 
one year of experience using 
one of the following: PeopleSoft 
SAP, Baan, J.D. Edwards, Oracle 
Applications/Financials/ Manu 
facturing/HR. $100,000 per 
yr, 40 hrs/wk. Please submit 
resumes to: JS Supervisor 
Greene County Team PA 
CareerLink, 4 West High Street 
Waynesburg, PA 15370-1324 
Job Order #: WEB 222436 


SENIOR SOFTWARE ENGI 
NEER to analyze, develop, test 
and implement new systems and 
improve existing systems on 
Windows and UNIX based 
platforms using JAVA and 
Progress 4GL; develop in-depth 
knowledge of business functions, 
systems and technology for use 
in consulting both clients and 
Information Systems team mem- 
bers; coach and irain junior staff 
Require: “A M.S. degree in 
Computer Science, information 
Systems, or a closely related 
field plus one year of previous 
experience in the job offered or 
information systems design 
and/or development. *A B.S 
degree or foreign degree equiv- 
alent in Computer Science, In- 
formation Systems, or a closely 
related field and five (5) years of 
Progressive experience in the 
job offered or in information 
systems design and/or develop- 
ment will be accepted in lieu of a 
M.S. degree. **Prior experience 
must include 1 year Progress 
Competitive salary & benefits, 8 
am to 5 pm, M-F. Send resume 
to: Corporate HR, EarthLink 
Inc., 1375 Peachtree St., Level 
A, Atlanta, GA 30309 (No Phone 
Calls Please) 


PROGRAMMER: Design flow 
charts, convert data & write 
program; enhance hotel database 
using Word Star Pro., dBadelV. 
Pascal, C, HTML for Web Pro 
gramming, & Spreadsheet using 
Lotus 1-2-3. Re.: 2 yrs. exp. in job 
off. or 3 yrs. as Tech. Support 
Mgr. Resume to: Hospitality 
venture Lavista, 2180 Northlake 


Pkwy, Tucker, Georgia 30084 


Senior Database Administrator 
Waltham, MA 
Experience must include DBA 
and design of client-server 
applications, deploying Oracle 
Parallel Server and Enterprise 
Manager, SQL*Plus, PL/SQL 
on Windows NT and UNIX plat- 
forms. Attractive compensation 
package. Send resume to Human 
Resources, Beyond Genomics, 
Inc., 40 Bear Hill Road 
Waltham, MA 02451, work@ 
beyonagenomics.com, 781-895- 
1119 (fax). NO AGENCYS 
PLEASE. NO PHONE CALLS 

PLEASE 


Senior Software Engineers 
(multiple openings): Design 
develop and implement software 
systems to determine feasibility 
of design and directs software 
testing procedures, programming 
and documentation using rela- 
tional data base management 
systems (RDBMS). Work involves 
extensive travel and frequent 
relocation. Must have six months 
of experience in the job offered 
or as a computer professional 
and must have six months using 
1 from A as follows: A) Informix 
Oracle, Foxpro, Sybase, SQL 
Server, Progress. A Master's 
degree in one of several limited 
fields: Computer Sci/Apps, Eng 
Chem., Math, Physics or a 
scientific or business related 
field. Will accept Bachelors 
degree with five years of 
progressive experience as 
computer professional. Salary is 
$77,000 per/yr, 40 hrs/wk 
9:00-5:00 p.m. Please submit 
resumes to: Manager, West- 
moreland County CareerLink, 
300 East Hillis Street, Youn 
wood, PA. 15697-1808. Please 
reference Job Order No.: WEB 
222413, 


Geomatrix Services, Inc. has 
openings for Civil Engineers for 
job locations in New Jersey and 
elsewhere, with at least two 
years of civil engineering experi- 
ence. Job Duties: Plan, design 
and maintain several drawings 
for industrial and recreational 
buildings, schools, and family 
housing units; estimate personnel 
needs and schedule work to 
meet completion dates, and 
technical specifications; design 
structures, and prepare detailed 
drawings and estimates. Prepare 
base line schedule in PRIMAV- 
ERA software, update all activities 
weekly to monitor and record 
progress of the project, and pre- 
Pare shop drawings and drawn 
submittal drawings using Auto 
CAD. Positions require a Masters 
degree in civil engineering 
Excellent Pay and Benefits. Mail 
resume to: HR Dept., Geomatrix 
Services, Inc., 9 Schoolhouse 
Lane, Somerville, New Jersey 
08876 


Software AG, Inc. is recruiting for 
all types of Systems Analysis 
Consultants, Staff Consultants. 
Project Managers/Leaders 
System/Software Engineers 
Quality Assurance and R&D 
Specialists, Programmer/Analysts 
and other computer science 
professionals. 


We have offices throughout the 
U.S. including: Reston, VA; Atlanta 
Chicago; Dallas; Sacramento. 
San Ramon and irvine, CA; and 
Denver 


Resume to: Software AG, Inc 

ATTN: HR, Computerworld Ad 
11190 Sunrise Valley Dr., Reston 
VA 20191. Fax: 703-391-8340. 
For additional information, find us 
under Computer, or visit our Web 
site: www.softwareagusa.com 


SENIOR SOFTWARE ENGI- 
NEER to lead a team in the design 
development, testing and imple- 
mentation of web-based appii- 
cation software in a client/server 
environment using Oracle, SQL 
Server, HTML, JavaScript, TCL 
Java, JSP, XML, XSLT and 
Vignette under UNIX, SUN 
Solaris and Windows operating 
systems; Supervise and monitor 
junior programmers and engi- 
neers. Require: B.S. degree in 
Computer Science/Engineering, 
or a closely related field with five 
years of progressively responsible 
experience in the job offered 
or as a Programmer/Systems 
Analyst. Extensive travel on as- 
signments to various client sites 
within the U.S. is required. Com- 
petitive salary offered. Apply by 
resume to: Sophie Mookerjie 
President, Software Paradigms 
International, Inc., 3 Woodiawn 
Drive, NE, Marietta, GA 30067 
Attn: Job SS. 


Programmer Analyst (multiple 
openings):Design, develop and 
implement software systems to 
determine feasibility of design 
and directs software testing 
procedures, programming and 
documentation using relational 
data base management systems 
(RDBMS). Work involves exten- 
sive travel and frequent reloca- 
tion Must have 1 year of 
experience in job offered or as a 
computer professional as well as 
1 year using 1 of the following 
A) Informix, Oracle, Foxpro, 
Sybase, SQL Server, Progress 
Bachelors degree, or functional 
or foreign equivalent, in Computer 
Sci/Apps, Eng., Chem., Math 
Physics or a scientific related 
field. Salary is $67,000 per/yr, 40 
hrs/wk., 9:00-5:00 p.m. Please 
submit resumes to: Manager, 
Indiana Job Center, 350 North 
Fourth Street, Indiana, PA 
15701-2000. Please reference 
Job Order No.: WEB 222429 
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Privacy 


ney general about its privacy 
practices. 

In each settlement, the com- 
panies were required to make 
changes to their business prac- 
tices, impacting security in Eli 
Lilly’s case and the privacy 
practices of Toys R Us. 

There are some worries that 
privacy laws, particularly in 
the health care and financial 


sectors, may encourage private 


litigation. 

“Enforcement is an issue for 
us,” said Richard Rosenhagen, 
privacy officer at Good Samar- 
itan Hospital Medical Center 
in West Islip, N.Y., particularly 
through litigation. “We don’t 
know what kind of risks we’re 
going to be dealing with.” 


Seals Can Help Tell E-Mail From Spam 


The privacy seals found on many 
Web pages are being added to 
e-mail to distinguish legitimate 
mailings from the flood of spam. 

A goal of the technology devel- 
oped by Truste, a San Jose-based 
nonprofit privacy seal group, and 
ePrivacy Group Inc., a Malvern, 
Pa.-based consulting and technol- 
ogy firm, is to boost consumer 
confidence in business e-mail, 
which they say is being eroded by 
ever-growing volumes of spam. 

The Trusted Sender program is 
being beta-tested by The Micro- 
soft Network (MSN) and other 
firms, which want to see if the seal 
program improves e-mail re- 
sponse rates and encourages 
people to remain on mailing lists. 

“It could, over time, help people 
sort out in their in-box who really 
is a trusted sender and who isn't,” 
said Diane McDade, privacy prod- 
uct manager at MSN. 

As with the Web seal program, 
companies that participate in 
Trusted Sender must agree to 
practices such as sending e-mail 
only to people who have given 
their permission. The program 
also requires installation of a pro- 


| the agency’s approach to priva- 








The FTC is clearly empha- | 
sizing enforcement. The Bush 
administration has brought a 
philosophical shift to bear on 


cy matters. 

During the Clinton adminis- 
tration, the FTC focused on 
corporate data collection prac- 
tices and sought privacy legis- 
lation, whereas the Bush ad- 
ministration is targeting the 
misuse of data. 


Accountability, Trade-offs 
Howard Beales, the FTC’s 
consumer protection chief, 
said at the International Asso- 
ciation of Privacy Officers con- 
ference here last week that 
there are worthwhile trade- 
offs in corporate data manage- 
ment practices, but companies 
should be held accountable for 
their stated privacy policies. 
“Information-sharing poses 


prietary server technology, either 
a single appliance or cluster, de- 
pending on business needs, that 
adds the seal to outgoing mail. 

An e-mail recipient sees the 
stamp on the upper right-hand 
corner of an e-mail. By clicking on 
a verification link, the user can 
check the authenticity of the 
e-mail. However, users have to 
either open the e-mail to see the 
stamp or use their e-mail client's 
preview feature; otherwise, the 
only indication of the stamp is a 
(P) in the subject line. 

Truste and ePrivacy Group are 
talking with Microsoft, Yahoo Inc. 
and other e-mail providers and 
clients to develop a means for 
getting the seal to be evident 
without opening the letter. 

The absence of easy in-box 
recognition is a problem, said 
Jonathan Gaw, an analyst at IDC 
in Framingham, Mass. “I don't 
think it's a complete solution,” he 
said, but if there is easy in-box 
recognition, businesses “might 
value something that helps their 
commercial e-mail stand out from 
spam.” 

~ Patrick Thibodeau 





NEWS 


some risk, but it also offers 
enormous benefits,” such as 
consolidated statements, in- 
stant credit approval and lower 
business costs for transaction 
processing, said Beales. “Such 
benefits should not be sacri- 
ficed needlessly.” 

The FTC will step in when 
needed but not necessarily in 
every instance, he said. In de- 
ciding what course of action to 
take, Beales said, the FTC will 


| ask a company two questions: 
| Did you have a system in place 


that was appropriate to the 
sensitivity of the information, 


and did you follow your pro- | 


cedures? 


Along with regulatory ac- | 
tion, companies may face pri- | 


vate lawsuits. There have been 


few lawsuits so far because it’s | 
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Data Center 


ment in its own data centers, 
said Richard Bogues, director 
of the corporate data center at 
Philips Electronics North 
America Corp. in South Plain- 
field, NJ. “It gives us much 
more flexibility and control,” 
he said. The cost of operating 
such centers will be offset by 
the savings on equipment host- 
ing charges, Bogues added. He 
declined to specify that cost. 

A growing number of com- 
panies are looking for service 
providers to help them manage 
systems on their premises, ac- 
cording to Laurie McCabe, an 
analyst at Summit Strategies 
Inc. in Boston. In some cases, 
firms hope to better leverage 
their data center investments 
through such arrangements, 
McCabe said. Others want 
greater control over their IT 
assets when they do outsource. 

Plans to move Philips’ Inter- 
net data center back in-house 
started in July as concern grew 
about the financial viability of 
Exodus, Bogues said. Santa 
Clara, Calif-based Exodus 
hosted more than 350 Web 





telecommunications 


move into one of its own facili- | 


| cility was quickly converted | 





Legislation: Privacy bills are 

still pending in Congress, but there 
are doubts about whether lawmak- 
ers are ready to take action. One in- 
centive: Businesses want federal 
preemption of state privacy laws. 
Federal approach: Bush is 
aggressive on privacy iaw enforce- 
ment but has shown little interest 
so far in privacy legislation. 


Lawsuits: A threat, but showing 
damages is difficult. 


difficult to show damages from 
privacy violations, said Larry 
Ponemon, CEO of Privacy 
Council Inc. in Richardson, | 
Texas. “But I think it’s coming,” | 
he said. 





| sites for Philips at a facility in | 


Weehawken, NJ. 

“We decided that our prima- | 
ry data center should be 
owned and managed by Philips 
and not have this dependency | 
ona third party,” Bogues said. | 

Originally, the plan was to | 
find a suitable building within 
a 100-mile radius of the Exodus 
facility and migrate everything 
over by the end of March. 

But the schedule was quickly 
advanced when Exodus filed 
for Chapter 11 bankruptcy pro- 
tection on Sept. 26, a move that 
was followed by a deal to sell 
its assets to London-based Ca- | 
ble & Wireless PLC. “We de- 
cided we wanted to be out of | 
there by Dec. 31,” Bogues said. 

The task was complicated by 
the Sept. ll attacks and the de- 
mand for office space and 
services 
from companies that had been 
in the World Trade Center.. 

Philips finally decided to 


ties in New Jersey — a build- 
ing that originally had been a | 
data but had been | 
switched to office use. The fa- | 


center 


back into a full-fledged data 
center with Tl and OC3 lines 
for Internet connectivity and | 





Although there are several 
federal privacy bills pending, 
there’s skepticism among ob- 
servers about whether either 
Congress or the White House 
is ready to deal with this issue. 

Chris Israei, a U.S. Depart- 
ment of Commerce official, 
said the administration is 
monitoring legislation in Con- 
gress and continues to “re- 
main engaged with industry,” 
but it hasn’t taken any stand on 
pending bills 

Not everyone at the FTC 
agrees with this approach. 
Mozelle Thompson, a com- 
missioner at the FTC, said at 
the conference that while he 
supports enforcement, he still 
believes that there’s a benefit 
to having some kind of legisla- 
tive privacy baseline. D 


Changeover 


Challenges 


The problems Philips faced in 
relocating its data center in- 
cluded the following: 


i 
; 
| 


| backup power capabilities. 


Philips’ main hardware ven- 
dors, Dell Computer Corp. and 
Sun Microsystems Inc., helped 
move systems from the Exodus 
facility to its new data center. 

In the near term, Philips will 
set up similar data centers in 
Europe and Asia, and link all 
three in a high-availability con- 
figuration. D 
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FRANK HAYES/FRANKLY SPEAKING 


t the Road, Sam! 


ONGRATULATIONS, SAM PALMISANO. Sure, you’ve 
been Lou Gerstner’s heir apparent for the past year or 
so, ever since you became IBM’s president (see page 
21). But “heir apparent” doesn’t mean a whole lot in this 
business — not until you nail down the top job. Now 
you have. Starting in March, you’re in charge at IBM. You get to run 
the show. You'll be the big man in Armonk. 
Now get ready to kiss Armonk goodbye. 


Nine years ago, IBM was in trouble — deep 
trouble. IBM was a company whose business 
model depended on it being at the top of the IT 
industry. But IBM wasn’t on top nine years ago. 
IBM was losing money by the billions. 

The hot-air sector of the IT industry said 
IBM couldn’t survive without breaking itself up. 
The pundits and columnists and blowhards 
agreed that IBM needed a technologist as boss, 
and they insisted that IBM would have to scale 
itself back to some core competency to stay 
afloat, in whatever diminished form. 

Yeah, right. Instead of a techie, we got cookie 
man Lou Gerstner. And instead of breaking IBM 
up, the man from Nabisco built it back up to be- 
ing a broad-based industry leader. 

Gerstner did that by grinding IBM’s sacred 
cows into hamburger. At the old IBM, hardware 
was king and the mainframe was God. Some 
IBM products were intentionally crippled so 
they wouldn’t take sales away from other IBM 
products. And for IBM salespeople to sell non- 
IBM products was heresy. 

Lou Gerstner dumped all that. Today at IBM, 
services are the big moneymaker. Nothing gets 
crippled, at least not on purpose. And nothing is 
out of the question — including selling com- 
petitors’ products, if that’s what it takes to close 
the deal. 

Gerstner did find a core compe- 
tency for IBM, though: He changed 
IBM from a computer company to a 
computing company. 

So whatever customers needed, 
that was what IBM delivered. When 
that meant delivering services, IBM 
delivered services. When it meant 
trucking in somebody else’s PCs or 
servers, that’s what was on the 
truck. When it called for once-un- 
thinkable products like Linux main- 
frames, that’s what IBM produced. 

Instead of moving hardware out 





of IBM warehouses and into customers’ data 
centers, Gerstner concentrated on moving mon- 
ey out of customers’ wallets and into IBM’s 
pocket. And IBM was successful again. 

Now, Sam Palmisano, it’s your turn to get the 
hot-air treatment. Some of the same people who 
said nine years ago that IBM needed a technolo- 
gist to break it up are saying now that as a 29- 
year IBM insider, you're the wrong guy for the 
job of keeping it together. That you don’t have 
the vision to see where Big Blue should go or 
how to get it there. That your best bet is to fo- 
cus on improving IBM’s hardware revenue. 

Baloney. That’s advice for the old Big Blue, 
the computer company. Customers hated that 
old IBM. They hated being locked into the hard- 
ware and software and architectures IBM 
shoved down their throats. They wanted to 
wriggle out from IBM’s grip, and they ended up 
buying just about anything but IBM to escape. 

But today, they’re not trying to wriggle out. 
They’re lined up to buy IT services from the 
new Big Blue — IBM the computing company. 

Those same customers wili also buy more 
IBM hardware and software — if IBM has what 
they need. And customers will tell you what 
they need, what problems they have to solve, 
what really matters to them. After all, IBM is 
the company they’re hiring to make 
it all work. 

All you have to do is offer what 
they need. But first, you have to find 
out what that is. 

You've clocked a lot of face time 
with customers over the past 28 
years. Now it’s time to clock a lot 
more face time. Not to sell IBM 
products. Not even to sell IBM. But 
to listen. 

And you can’t do that in Armonk. 

So congratulations, Sam Palmi- 
sano. Now pack your bags and get 
out of town. D 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes®computerworld.com. 





COMPANY'S NEW president, 
who has a heavy technical back- 
ground, calls in IT director pilot 
fish and snarls, “Our @#$%! net- 
work is absolute junk!” What's 
wrong? asks shocked fish. Turns 
out the boss doesn’t have the 
Web access he requested weeks 
before. As he tries to log in to 
prove his point, fish asks, “Why 
are you spelling your name 
wrong at the log-in?” 


PILOT FISH shows up for a 
meeting on improving communi- 
cations, only to find the room 
empty. “Oh, the meeting has 
been canceled because it’s not 
needed,” says departmental sec- 
retary. “This should have been 
communicated to you.” 


AFTER TWO WEEKS of trou- 
bleshooting network problems 
at a construction site, pilot fish's 
co-worker walks in with his arms 
full of Ethernet cable - obviously 
stretched, with the insulation 
pulled apart in several places. 
“While the boss was out, a sum- 
mer-help guy decided to pull it 
through the conduit as a favor,” 
fish says. “When it was too hard 
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interarm 
to pull, he attached it to a tractor 
and pulled it through 500 feet of 
conduit.” 


HELP DESK pilot fish is looking 
for what's taking up all the space 
on auser's Outlook account. 
“Check the properties of your 
folders and tell me which one 
takes up the most space,” fish 
instructs user. “How can | tell?” 
user asks. “Look for the folder 
with the largest number,” fish 
says. User persists: “How do | 
tell what the largest number is?” 


SOME PEOPLE can recognize 
when something comes broken 
right out of the box, sighs pilot 
fish who manages IT for lots of 
rural offices. One user notices 
her new mouse rattles when she 
shakes it. So she squirts some 
Crazy Glue into the hole on the 
bottom and fixes the rattle, once 
and for all. 


Rattle my, er, mouse: sharky@ 
computerwor!d.com. You 
score a sharp Shark shirt if your 
true tale of IT life sees print - or 
if it shows up in the daily feed at 
computerworld.com/sharky. 


The 5th Wave 


“It's a wonderful idea, Ralph. But do 
you really think AnnoylereonTP’ and 
“DurbMemo! P’ will work as protocols on 

our TCP/IP suite?” 





Ac . Solomon Embaye, 27. z 
: Cisco Networking Academy Student 
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other countries. | 


THE CODERNAUTS WERE ON A SEARCH FOR A DATABASE THAT RUNS ON LINUX; UNIX’ AND WINDOWS’ 2000. THEY DISCOVERED: 


DB2 ouTPERFORMS ORACLE 


3 CUSTOMERS KNOW IT, PARTNERS KNOW IT, BENCHMARKS PROVE IT i 


- IT’S A DIFFERENT KIND or WORLD. 
@ business software ibm.com/db2/outperform YOU NEED A DIFFERENT KIND or SOFTWARE. 








